Momentum-Apps/nrf24scan/nrf24scan.c

//
// Written by vad7, 20.11.2022.
//
#include "nrf24scan.h"

#include <furi.h>
#include <furi_hal.h>
#include <gui/gui.h>
#include <dialogs/dialogs.h>
#include <input/input.h>
#include <stdlib.h>
#include <dolphin/dolphin.h>
#include <nrf24.h>
#include <u8g2.h>

#define TAG "nrf24scan"
#define VERSION "2.2"
#define MAX_CHANNEL 125
#define MAX_ADDR 6

#define SCAN_APP_PATH_FOLDER STORAGE_APP_DATA_PATH_PREFIX
#define SETTINGS_FILENAME "addresses.txt" // Settings file format (1 parameter per line):
// SNIFF - if present then sniff mode
// Rate: 0/1/2 - rate in Mbps (=0.25/1/2)
// Ch: 0..125 - default channel
// ESB: 0/1 (1 - Enhanced ShockBurst)
// DPL: 0/1 (1 - Dynamic Payload Length)
// CRC: 0/1/2 (CRC length)
// Payload: 1..32 (bytes)
// P0: address P0 in hex (5 byte, LSB last)
// P1: address P1 in hex (5 byte, LSB last)
// P2: address P2, LSB in hex (1 byte)
// P3: address P3, LSB in hex (1 byte)
// P4: address P4, LSB in hex (1 byte)
// P5: address P5, LSB in hex (1 byte)
// captured data:
//		first byte = { RAW packet flag (0x80/0x00) } + { channel number }
//		second byte = { Payload len 5 bits, 0 = 32 } + {{ RAW packet: ESB flag 0x04/0x00 + address size-2 if RAW packet } or { pipe #(0..5) }},
// ... up to MAX_LOG_RECORDS-1
#define SNIFF_FILENAME "sniff.txt" // settings for sniff mode
#define LOG_FILENAME "log"
#define LOG_FILEEXT ".txt"
#define MAX_LOG_RECORDS 200
#define MAX_FOUND_RECORDS 70
#define LOG_REC_SIZE 34 // max packet size
#define VIEW_LOG_MAX_X 22
#define VIEW_LOG_WIDTH_B 10 // bytes

const char SettingsFld_Rate[] = "Rate:";
const char SettingsFld_Ch[] = "Ch:";
const char SettingsFld_ESB[] = "ESB:";
const char SettingsFld_DPL[] = "DPL:";
const char SettingsFld_CRC[] = "CRC:";
const char SettingsFld_Payload[] = "Payload:";
const char SettingsFld_Sniff[] = "SNIFF";
char SettingsFld_Addr = 'P';

Nrf24Scan* APP;
uint8_t what_doing = 0; // 0 - setup, 1 - view log, 2 - view addresses
uint8_t what_to_do =
    1; // 0 - view, 1 - view & sniff, 2 - view & read, 3 - view & read selected addr
uint8_t save_settings = 0;
char screen_buf[64];
char addr_file_name[32];
uint8_t NRF_rate = 2; // 0 - 250Kbps, 1 - 1Mbps, 2 - 2Mbps
uint8_t NRF_channel = 0; // 0..125
uint8_t NRF_ESB = 1; // 0 - ShockBurst, 1 - Enhanced ShockBurst
uint8_t NRF_DPL = 0; // 1 - Dynamic Payload Length
uint8_t NRF_CRC = 2; // 1 - No, 1 - CRC 1byte, 2 - CRC 2byte
uint8_t NRF_Payload = 32; // Payload len in bytes or Minimum payload in sniff mode, 0..32
uint8_t NRF_Payload_sniff_min = 0;
uint8_t NRF_AA_OFF = 0; // Disable Auto Acknowledgement
bool NRF_ERROR = 0;
bool NRF_BOARD_POWER_5V = false;

struct ADDRS {
    uint8_t addr_P0[5]; // MSB first
    uint8_t addr_P1[5]; // MSB first
    uint8_t addr_P2; // LSB only, MSB bytes equal addr_P1
    uint8_t addr_P3; // LSB only, MSB bytes equal addr_P1
    uint8_t addr_P4; // LSB only, MSB bytes equal addr_P1
    uint8_t addr_P5; // LSB only, MSB bytes equal addr_P1
    uint8_t addr_len; // 2..5
    uint8_t addr_count;
};

struct ADDRS addrs;
struct ADDRS addrs_sniff;
bool sniff_loaded = 0;
int16_t found_total;
int16_t view_found;

int8_t log_to_file = 0; // 0 - no, 1 - yes(new), 2 - append, -1 - only clear
uint16_t log_arr_idx;
uint16_t view_log_arr_idx = 0;
uint16_t view_log_arr_x = 0;
bool save_to_new_log = true;
uint16_t last_packet_send = -1;
uint8_t last_packet_send_st = 0;
int16_t find_channel_period = 0; // sec
uint8_t menu_selected = 0;
uint32_t start_time;
uint8_t view_log_decode_PCF =
    0; // view log: 1 - decode packet control field (9b) when ESB off. After pipe # (hex): <Payload len 6b><PID_2b+NO_ACK_1b>
uint8_t view_log_decode_CRC = 0; // CRC bytes - 1/2, 0 - none

#define menu_selected_max 5
enum {
    Menu_open_file = 0,
    Menu_enter_channel,
    Menu_enter_rate,
    Menu_enter_scan_period,
    Menu_log,
    Menu_ok
};

//#define MIN(a, b)  ((a<b)?a:b)

static uint8_t GetHexVal(char hex) {
    return (uint8_t)hex - ((uint8_t)hex < 58 ? 48 : ((uint8_t)hex < 97 ? 55 : 87));
}

// Return num bytes in array
static uint8_t ConvertHexToArray(char* hex, uint8_t* array, uint8_t maxlen) {
    uint8_t len = 0;
    while(maxlen) {
        uint8_t ch = *hex++;
        if(ch == 0) break;
        if(ch < '0') continue;
        *array++ = (GetHexVal(ch) << 4) + GetHexVal(*hex++);
        len++;
        maxlen--;
    }
    return len;
}

static void add_to_str_hex_bytes(char* out, char* arr, int bytes) {
    if(bytes <= 0) return;
    out += strlen(out);
    do {
        snprintf(out, 3, "%02X", *arr++);
        out += 2;
    } while(--bytes);
}

static void add_to_furi_str_hex_bytes(FuriString* str, char* arr, int bytes) {
    if(!bytes) return;
    do {
        furi_string_cat_printf(str, "%02X", *arr++);
    } while(--bytes);
}

static void add_to_str_hex_bytes_shift_9b(char* out, char* arr, int bytes) {
    if(bytes <= 0) return;
    out += strlen(out);
    arr++; // +8b
    do {
        snprintf(out, 4, "%02X", ((uint8_t)(*arr << 1)) | (*(arr + 1) >> 7));
        arr++;
        out += 2;
    } while(--bytes);
}

void clear_log() {
    log_arr_idx = 0;
    view_log_arr_idx = 0;
    last_packet_send = -1;
    found_total = 0;
    view_found = -1;
}

void write_to_log_file(Storage* storage, bool f_settings) {
    if(log_arr_idx == 0 && !f_settings) return;
    Stream* file_stream = file_stream_alloc(storage);
    FuriString* str = furi_string_alloc();
    furi_string_set(str, SCAN_APP_PATH_FOLDER);
    furi_string_cat(str, "/");
    bool fl;
    if(f_settings) {
        furi_string_cat(str, SETTINGS_FILENAME);
        fl = file_stream_open(
            file_stream, furi_string_get_cstr(str), FSAM_READ_WRITE, FSOM_CREATE_ALWAYS);
        if(!fl) file_stream_close(file_stream);
    } else {
        furi_string_cat(str, LOG_FILENAME);
        furi_string_cat(str, LOG_FILEEXT);
        if(save_to_new_log) {
            int cnt = 1;
            do {
                fl = file_stream_open(
                    file_stream, furi_string_get_cstr(str), FSAM_READ_WRITE, FSOM_CREATE_NEW);
                if(fl) break;
                file_stream_close(file_stream);
                furi_string_set(str, SCAN_APP_PATH_FOLDER);
                furi_string_cat(str, "/");
                furi_string_cat(str, LOG_FILENAME);
                furi_string_cat_printf(str, "-%02d", cnt);
                furi_string_cat(str, LOG_FILEEXT);
            } while(++cnt < 100);
            if(!fl) {
                FURI_LOG_E(TAG, "Failed to create new log file");
                notification_message(APP->notification, &sequence_blink_red_100);
            }
        } else {
            fl = file_stream_open(
                file_stream, furi_string_get_cstr(str), FSAM_READ_WRITE, FSOM_OPEN_APPEND);
            if(fl) {
                if(stream_size(file_stream) == 0) save_to_new_log = true;
            } else
                file_stream_close(file_stream);
        }
    }
    if(fl) {
        FURI_LOG_D(TAG, "Save to %s", furi_string_get_cstr(str));
        if(save_to_new_log || f_settings) {
            if(what_to_do == 1)
                furi_string_printf(str, "%s\n", SettingsFld_Sniff);
            else
                furi_string_reset(str);
            furi_string_cat_printf(
                str,
                "%s %d\n%s %d\n%s %d\n",
                SettingsFld_Rate,
                NRF_rate,
                SettingsFld_Ch,
                NRF_channel,
                SettingsFld_ESB,
                NRF_ESB);
            furi_string_cat_printf(
                str,
                "%s %d\n%s %d\n%s %d\n",
                SettingsFld_DPL,
                NRF_DPL,
                SettingsFld_CRC,
                NRF_CRC,
                SettingsFld_Payload,
                what_to_do == 1 ? NRF_Payload_sniff_min : NRF_Payload);
            if(addrs.addr_count > 0) {
                furi_string_cat_printf(str, "P0: ");
                add_to_furi_str_hex_bytes(str, (char*)addrs.addr_P0, addrs.addr_len);
                furi_string_cat(str, "\n");
            }
            if(addrs.addr_count > 1) {
                furi_string_cat_printf(str, "P1: ");
                add_to_furi_str_hex_bytes(str, (char*)addrs.addr_P1, addrs.addr_len);
                furi_string_cat(str, "\n");
            }
            if(addrs.addr_count > 2) {
                furi_string_cat_printf(str, "P2: ");
                furi_string_cat_printf(str, "%02X\n", addrs.addr_P2);
            }
            if(addrs.addr_count > 3) {
                furi_string_cat_printf(str, "P3: ");
                furi_string_cat_printf(str, "%02X\n", addrs.addr_P3);
            }
            if(addrs.addr_count > 4) {
                furi_string_cat_printf(str, "P4: ");
                furi_string_cat_printf(str, "%02X\n", addrs.addr_P4);
            }
            if(addrs.addr_count > 5) {
                furi_string_cat_printf(str, "P5: ");
                furi_string_cat_printf(str, "%02X\n", addrs.addr_P5);
            }
            if(!(fl = stream_write_string(file_stream, str) == furi_string_size(str))) {
                FURI_LOG_E(TAG, "Failed to write header to file!");
                notification_message(APP->notification, &sequence_blink_red_100);
            }
        }
        if(fl) {
            if(f_settings) {
                save_settings = 0;
                if(strcmp(addr_file_name, "NONE") == 0) strcpy(addr_file_name, SETTINGS_FILENAME);
            } else {
                int i = 0;
                for(; i < log_arr_idx; i++) {
                    furi_string_reset(str);
                    uint8_t* ptr = APP->log_arr + i * LOG_REC_SIZE;
                    int len;
                    if(ptr[0] & 0x80) { // RAW
                        len = (ptr[1] & 0b11) + 2 + ((ptr[1] & 0b100) ? 2 : 0) + (ptr[1] >> 3) +
                              2; // addr + PCF? + payload + crcmax
                    } else {
                        len = (ptr[1] >> 3);
                        if(len == 0) len = 32;
                    }
                    //if(len < NRF_Payload) len = NRF_Payload;
                    add_to_furi_str_hex_bytes(str, (char*)ptr, len + 2);
                    furi_string_cat(str, "\n");
                    if(stream_write_string(file_stream, str) != furi_string_size(str)) {
                        FURI_LOG_E(TAG, "Failed to write to file!");
                        break;
                    }
                }
                if(i == log_arr_idx) {
                    notification_message(APP->notification, &sequence_blink_yellow_100);
                    FURI_LOG_D(TAG, "File saved");
                }
                save_to_new_log = false;
            }
        }
        file_stream_close(file_stream);
    } else {
        FURI_LOG_E(TAG, "Failed to open file %s", furi_string_get_cstr(str));
        notification_message(APP->notification, &sequence_blink_red_100);
    }
    stream_free(file_stream);
    furi_string_free(str);
}

static bool select_settings_file(Stream* stream) {
    DialogsApp* dialogs = furi_record_open("dialogs");
    bool result = false;
    FuriString* path;
    path = furi_string_alloc();
    furi_string_set(path, SCAN_APP_PATH_FOLDER);

    DialogsFileBrowserOptions browser_options;
    dialog_file_browser_set_basic_options(&browser_options, ".txt", NULL);
    browser_options.hide_ext = false;

    bool ret = dialog_file_browser_show(dialogs, path, path, &browser_options);

    furi_record_close("dialogs");
    if(ret) {
        if(!file_stream_open(stream, furi_string_get_cstr(path), FSAM_READ, FSOM_OPEN_EXISTING)) {
            FURI_LOG_D(TAG, "Cannot open file \"%s\"", furi_string_get_cstr(path));
            file_stream_close(stream);
        } else {
            FURI_LOG_D(TAG, "Open file \"%s\"", furi_string_get_cstr(path));
            strncpy(
                addr_file_name,
                furi_string_get_cstr(path) + sizeof(SCAN_APP_PATH_FOLDER),
                sizeof(addr_file_name));
            result = true;
        }
    }
    furi_string_free(path);
    return result;
}

// 0 - success, otherwise an error
static uint8_t load_settings_file(Stream* file_stream) {
    size_t file_size = 0;
    char* file_buf;
    uint8_t err = 5;
    file_size = stream_size(file_stream);
    if(file_size == (size_t)0) {
        FURI_LOG_D(TAG, "load failed. file_size: %d", file_size);
        return 1;
    }
    file_size = MIN(file_size, (size_t)LOG_REC_SIZE * MAX_LOG_RECORDS * 2 + 100);
    file_buf = malloc(file_size + 1);
    if(file_buf == NULL) {
        FURI_LOG_D(TAG, "Memory low, need: %d", file_size);
        return 2;
    }
    memset(file_buf, 0, file_size + 1);
    if(stream_read(file_stream, (uint8_t*)file_buf, file_size) == file_size) {
        FURI_LOG_D(TAG, "Loading settings file");
        char* line_ptr = file_buf;
        int16_t line_num = 0;
        what_to_do = 2;
        sniff_loaded = 0;
        bool log_loaded = false;
        while(line_ptr && (size_t)(line_ptr - file_buf) < file_size) {
            char* end_ptr = strstr((char*)line_ptr, "\n");
            if(end_ptr == NULL)
                end_ptr = file_buf + file_size;
            else
                *end_ptr = '\0';
            int line_len = end_ptr - line_ptr;
            if(*line_ptr == '\r' || line_len == 0) {
                line_ptr = end_ptr + 1;
                continue;
            }
            if(*(end_ptr - 1) < '0') {
                *(end_ptr - 1) = '\0';
                line_len--;
            }
            //FURI_LOG_D(TAG, " L#%d: [%d]%s", line_num, line_len, line_ptr);
            if(strncmp(line_ptr, SettingsFld_Rate, sizeof(SettingsFld_Rate) - 1) == 0) {
                NRF_rate = atoi(line_ptr + sizeof(SettingsFld_Rate));
            } else if(strncmp(line_ptr, SettingsFld_Ch, sizeof(SettingsFld_Ch) - 1) == 0) {
                NRF_channel = atoi(line_ptr + sizeof(SettingsFld_Ch));
            } else if(strncmp(line_ptr, SettingsFld_ESB, sizeof(SettingsFld_ESB) - 1) == 0) {
                NRF_ESB = atoi(line_ptr + sizeof(SettingsFld_ESB));
            } else if(strncmp(line_ptr, SettingsFld_DPL, sizeof(SettingsFld_DPL) - 1) == 0) {
                NRF_DPL = atoi(line_ptr + sizeof(SettingsFld_DPL));
            } else if(strncmp(line_ptr, SettingsFld_CRC, sizeof(SettingsFld_CRC) - 1) == 0) {
                NRF_CRC = atoi(line_ptr + sizeof(SettingsFld_CRC));
                if(what_to_do == 1) view_log_decode_CRC = NRF_CRC;
            } else if(strncmp(line_ptr, SettingsFld_Payload, sizeof(SettingsFld_Payload) - 1) == 0) {
                uint8_t pld = atoi(line_ptr + sizeof(SettingsFld_Payload));
                if(pld > 32) pld = 32;
                if(sniff_loaded) {
                    NRF_Payload_sniff_min = pld;
                } else {
                    if(pld == 0) pld = 32;
                    NRF_Payload = pld;
                }
            } else if(strncmp(line_ptr, SettingsFld_Sniff, sizeof(SettingsFld_Sniff) - 1) == 0) {
                what_to_do = 1;
                sniff_loaded = 1;
            } else if(*line_ptr == SettingsFld_Addr) {
                char a = *(++line_ptr);
                struct ADDRS* adr = sniff_loaded ? &addrs_sniff : &addrs;
                line_ptr += 3;
                switch(a) {
                case '0':
                    memset(adr, 0, sizeof(addrs));
                    adr->addr_len =
                        ConvertHexToArray(line_ptr, adr->addr_P0, sniff_loaded ? 3 : 5);
                    if(adr->addr_len >= 2) err = 0;
                    break;
                case '1':
                    ConvertHexToArray(line_ptr, adr->addr_P1, what_to_do == 1 ? 3 : 5);
                    break;
                case '2':
                    ConvertHexToArray(line_ptr, &adr->addr_P2, 1);
                    break;
                case '3':
                    ConvertHexToArray(line_ptr, &adr->addr_P3, 1);
                    break;
                case '4':
                    ConvertHexToArray(line_ptr, &adr->addr_P4, 1);
                    break;
                case '5':
                    ConvertHexToArray(line_ptr, &adr->addr_P5, 1);
                    break;
                default:
                    a = 0;
                    break;
                }
                if(err == 0 && a) adr->addr_count = a - '0' + 1;
            } else if(line_len >= 3 * 2) { // data
                if(!log_loaded) {
                    log_loaded = true;
                    clear_log();
                    what_to_do = 0;
                }
                if(log_arr_idx < MAX_LOG_RECORDS - 1) {
                    if(ConvertHexToArray(
                           line_ptr, APP->log_arr + log_arr_idx * LOG_REC_SIZE, LOG_REC_SIZE) > 0)
                        err = 0;
                    log_arr_idx++;
                }
            }
            line_ptr = end_ptr + 1;
            line_num++;
        }
    } else {
        FURI_LOG_D(TAG, "load failed. file size: %d", file_size);
        err = 4;
    }
    free(file_buf);
    return err;
}

static void input_callback(InputEvent* input_event, void* ctx) {
    FuriMessageQueue* event_queue = ctx;
    furi_assert(event_queue);
    PluginEvent event = {.type = EventTypeKey, .input = *input_event};
    furi_message_queue_put(event_queue, &event, FuriWaitForever);
}

void check_add_addr(uint8_t* pkt) {
    if(addrs.addr_count > 0 && memcmp(addrs.addr_P0, pkt, addrs.addr_len) == 0) return;
    if(addrs.addr_count > 1 && memcmp(addrs.addr_P1, pkt, addrs.addr_len - 1) == 0) {
        if(addrs.addr_P1[addrs.addr_len - 1] == pkt[addrs.addr_len - 1]) return;
        if(addrs.addr_count > 2 && addrs.addr_P2 == pkt[addrs.addr_len - 1]) return;
        if(addrs.addr_count > 3 && addrs.addr_P3 == pkt[addrs.addr_len - 1]) return;
        if(addrs.addr_count > 4 && addrs.addr_P4 == pkt[addrs.addr_len - 1]) return;
        if(addrs.addr_count > 5 && addrs.addr_P5 == pkt[addrs.addr_len - 1]) return;
    }
    if(addrs.addr_count == 1)
        memcpy(addrs.addr_P1, pkt, addrs.addr_len);
    else if(addrs.addr_count == 2)
        addrs.addr_P2 = pkt[addrs.addr_len - 1];
    else if(addrs.addr_count == 3)
        addrs.addr_P3 = pkt[addrs.addr_len - 1];
    else if(addrs.addr_count == 4)
        addrs.addr_P4 = pkt[addrs.addr_len - 1];
    else if(addrs.addr_count == 5)
        addrs.addr_P5 = pkt[addrs.addr_len - 1];
    addrs.addr_count++;
}

static void prepare_nrf24(bool fsend_packet) {
    nrf24_write_reg(nrf24_HANDLE, REG_STATUS, 0x70); // clear interrupts
    nrf24_write_reg(
        nrf24_HANDLE,
        REG_RF_SETUP,
        (NRF_rate == 0 ? 0b00100000 :
         NRF_rate == 1 ? 0 :
                         0b00001000) |
            0b111); // +TX high power
    uint8_t erx_addr = (1 << 0); // Enable RX_P0
    struct ADDRS* adr = what_to_do == 1 ? &addrs_sniff : &addrs;
    if(!fsend_packet) {
        uint8_t payload = NRF_Payload;
        uint8_t* rec = APP->log_arr + view_log_arr_idx * LOG_REC_SIZE;
        uint8_t addr_size = (*(rec + 1) & 0b11) + 2;
        bool setup_from_log = false;
        if(what_to_do >= 2) {
            if(log_arr_idx && (*rec & 0x80)) {
                setup_from_log = true;
                memcpy(addrs.addr_P0, rec + 2, addr_size);
                addrs.addr_count = 1;
                addrs.addr_len = addr_size;
                payload = *(rec + 1) >> 3;
                if(what_to_do == 2) {
                    uint8_t* p = APP->log_arr + 2;
                    int16_t i = 0;
                    for(i = 0; i < log_arr_idx; i++, p += LOG_REC_SIZE) {
                        if((*(p - 2) & 0x80) && (*(p - 1) & 0b11) + 2 == addr_size &&
                           rec + 2 != p) {
                            if(memcmp(p, addrs.addr_P0, addr_size - 1) == 0) {
                                check_add_addr(p);
                                if(addrs.addr_count >= 6) break;
                            }
                        }
                    }
                }
            }
        }
        if(what_to_do == 1) { // SNIFF
            payload = 32;
            nrf24_write_reg(nrf24_HANDLE, REG_CONFIG, 0x70); // Mask all interrupts
            nrf24_write_reg(nrf24_HANDLE, REG_SETUP_RETR, 0); // Automatic Retransmission
            nrf24_write_reg(nrf24_HANDLE, REG_EN_AA, 0); // Auto acknowledgement
            nrf24_write_reg(
                nrf24_HANDLE,
                REG_FEATURE,
                0); // Enables the W_TX_PAYLOAD_NOACK command, Disable Payload with ACK, set Dynamic Payload
            // EN_DYN_ACK(0x01)  for W_TX_PAYLOAD_NOACK cmd broke AA on some fake nRF24l01+ modules
        } else if(setup_from_log) { // Scan
            nrf24_write_reg(
                nrf24_HANDLE,
                REG_CONFIG,
                0x70 | ((NRF_CRC == 1 ? 0b1000 :
                         NRF_CRC == 2 ? 0b1100 :
                                        0))); // Mask all interrupts
            nrf24_write_reg(nrf24_HANDLE, REG_RF_CH, *rec & 0x7F);
            nrf24_write_reg(
                nrf24_HANDLE,
                REG_FEATURE,
                *(rec + 2 + addr_size) >> 2 != 0x33 ?
                    4 :
                    0); // Enables the W_TX_PAYLOAD_NOACK command, Disable Payload with ACK, set Dynamic Payload
            if(*(rec + 1) & 0b100) { // ESB
                nrf24_write_reg(nrf24_HANDLE, REG_SETUP_RETR, 0x01); // Automatic Retransmission
                nrf24_write_reg(nrf24_HANDLE, REG_EN_AA, 0x3F); // Auto acknowledgement
            } else {
                nrf24_write_reg(nrf24_HANDLE, REG_SETUP_RETR, 0); // Automatic Retransmission
                nrf24_write_reg(nrf24_HANDLE, REG_EN_AA, 0); // Auto acknowledgement
            }
        } else {
            nrf24_write_reg(
                nrf24_HANDLE,
                REG_CONFIG,
                0x70 | ((NRF_CRC == 1 ? 0b1000 :
                         NRF_CRC == 2 ? 0b1100 :
                                        0))); // Mask all interrupts
            nrf24_write_reg(
                nrf24_HANDLE, REG_SETUP_RETR, NRF_ESB ? 0x01 : 0); // Automatic Retransmission
            nrf24_write_reg(
                nrf24_HANDLE,
                REG_EN_AA,
                NRF_AA_OFF || !NRF_ESB ? 0 : 0x3F); // Auto acknowledgement
            nrf24_write_reg(
                nrf24_HANDLE,
                REG_FEATURE,
                NRF_DPL ?
                    4 :
                    0); // Enables the W_TX_PAYLOAD_NOACK command, Disable Payload with ACK, set Dynamic Payload
            nrf24_write_reg(
                nrf24_HANDLE, REG_DYNPD, NRF_DPL ? 0x3F : 0); // Enable dynamic payload reg
            nrf24_write_reg(nrf24_HANDLE, REG_RF_CH, NRF_channel);
        }
        if(adr->addr_count == 0) return;
        nrf24_write_reg(nrf24_HANDLE, RX_PW_P0, payload);
        nrf24_set_maclen(nrf24_HANDLE, adr->addr_len);
        nrf24_set_mac(REG_RX_ADDR_P0, adr->addr_P0, adr->addr_len);
        uint8_t tmp[5] = {0};
        nrf24_read_reg(nrf24_HANDLE, REG_RX_ADDR_P0, tmp, adr->addr_len);
        for(uint8_t i = 0; i < adr->addr_len / 2; i++) {
            uint8_t tb = tmp[i];
            tmp[i] = tmp[adr->addr_len - i - 1];
            tmp[adr->addr_len - i - 1] = tb;
        }
        NRF_ERROR = memcmp(adr->addr_P0, tmp, adr->addr_len) != 0;
        FURI_LOG_D(TAG, "Payload: %d", payload);
        nrf24_write_reg(nrf24_HANDLE, RX_PW_P0, payload);
        if(adr->addr_count > 1) {
            nrf24_set_mac(REG_RX_ADDR_P1, adr->addr_P1, adr->addr_len);
            nrf24_write_reg(nrf24_HANDLE, RX_PW_P1, payload);
            erx_addr |= (1 << 1); // Enable RX_P1
        } else
            nrf24_write_reg(nrf24_HANDLE, RX_PW_P1, 0);
        if(adr->addr_count > 2) {
            nrf24_write_buf_reg(nrf24_HANDLE, REG_RX_ADDR_P2, &adr->addr_P2, 1);
            nrf24_write_reg(nrf24_HANDLE, RX_PW_P2, payload);
            erx_addr |= (1 << 2); // Enable RX_P2
        } else
            nrf24_write_reg(nrf24_HANDLE, RX_PW_P2, 0);
        if(adr->addr_count > 3) {
            nrf24_write_buf_reg(nrf24_HANDLE, REG_RX_ADDR_P3, &adr->addr_P3, 1);
            nrf24_write_reg(nrf24_HANDLE, RX_PW_P3, payload);
            erx_addr |= (1 << 3); // Enable RX_P3
        } else
            nrf24_write_reg(nrf24_HANDLE, RX_PW_P3, 0);
        if(adr->addr_count > 4) {
            nrf24_write_buf_reg(nrf24_HANDLE, REG_RX_ADDR_P4, &adr->addr_P4, 1);
            nrf24_write_reg(nrf24_HANDLE, RX_PW_P4, payload);
            erx_addr |= (1 << 4); // Enable RX_P4
        } else
            nrf24_write_reg(nrf24_HANDLE, RX_PW_P4, 0);
        if(adr->addr_count > 5) {
            nrf24_write_buf_reg(nrf24_HANDLE, REG_RX_ADDR_P5, &adr->addr_P5, 1);
            nrf24_write_reg(nrf24_HANDLE, RX_PW_P5, payload);
            erx_addr |= (1 << 5); // Enable RX_P5
        } else
            nrf24_write_reg(nrf24_HANDLE, RX_PW_P5, 0);
        nrf24_write_reg(nrf24_HANDLE, REG_EN_RXADDR, erx_addr);
    }
    nrf24_flush_rx(nrf24_HANDLE);
    nrf24_flush_tx(nrf24_HANDLE);
    nrf24_set_idle(nrf24_HANDLE);
}

void correct_NRF_Payload_sniff_min() {
    uint8_t pld = 32 - 3 - (NRF_ESB ? 2 : 0) - NRF_CRC + (addrs_sniff.addr_len - 2);
    if(NRF_Payload_sniff_min > pld) NRF_Payload_sniff_min = pld;
}

static void start_scanning() {
    FURI_LOG_D(TAG, "Start proc-%d: Ch=%d Rate=%d", what_to_do, NRF_channel, NRF_rate);
    if(what_to_do == 1) { // SNIFF
        correct_NRF_Payload_sniff_min();
        view_log_decode_CRC = NRF_CRC;
    } else if(sniff_loaded) { // Switch from sniff to scan/view
        // to do...
    }
    prepare_nrf24(false);
    if(NRF_ERROR) {
        FURI_LOG_E(TAG, "NRF R/W ERROR!");
        return;
    }
    nrf24_set_rx_mode(nrf24_HANDLE);
    start_time = furi_get_tick();
}

// start bitnum = 7
uint32_t calc_crc(uint32_t crc, uint8_t* ptr, uint8_t bitnum, uint16_t bits) {
    //uint8_t bitnum = 7;
    uint32_t crc_high, polynom;
    if(view_log_decode_CRC == 2) {
        crc_high = (1 << 16);
        polynom = 0x1021; // X^16+X^12+X^5+1 => 0x11021 & 0xFFFF = 0x1021
    } else {
        crc_high = (1 << 8);
        polynom = 0x07; // x^8+x^2+x^1+1 => 0x107 & 0xFF = 0x07
    }
    while(bits--) {
        crc <<= 1;
        if(((crc & crc_high) != 0) ^ ((*ptr >> bitnum) & 1)) crc ^= polynom;
        if(bitnum == 0) {
            ptr++;
            bitnum = 7;
        } else
            bitnum--;
    }
    return crc & (view_log_decode_CRC == 2 ? 0xFFFF : 0xFF);
}

// shifted 1 bit right
uint32_t get_shifted_crc(uint8_t* pcrc) {
    uint32_t crc = ((*pcrc << 1) & 0xFF) | (*(pcrc + 1) >> 7);
    if(view_log_decode_CRC == 2) {
        crc = (crc << 8) | ((*(pcrc + 1) << 1) & 0xFF) | (*(pcrc + 2) >> 7);
    }
    return crc;
}

bool check_packet(uint8_t* pkt, uint16_t size) {
    if(size < 3 || size > 32) return false;
    uint8_t b = *pkt;
    if(b == 0x55 || b == 0xAA || b == 0x00 || b == 0xFF)
        return false; // skip pkt when address begin with
    uint32_t prevcrc = 0xFFFFFFFF;
    bool found = false;
    uint8_t addr_size = 3;
    for(; addr_size <= 5; addr_size++) {
        if(NRF_ESB) {
            uint8_t _payload = *(pkt + addr_size) >> 2;
            if((_payload > size - addr_size - 2 - view_log_decode_CRC && _payload != 0x33))
                continue;
            uint8_t* p = pkt + addr_size;
            if(prevcrc == 0xFFFFFFFF) {
                prevcrc = calc_crc(
                    view_log_decode_CRC == 2 ? 0xFFFF : 0xFF,
                    pkt,
                    7,
                    3 * 8); // crc for smallest addr
            }
            uint32_t crc;
            if(addr_size > 3)
                crc = calc_crc(prevcrc, p - (addr_size - 3), 7, 8 * (addr_size - 3));
            else
                crc = prevcrc;
            if(_payload != 0x33) { // DPL
                crc = calc_crc(crc, p, 7, 9 + _payload * 8);
                if(crc == get_shifted_crc(p + _payload + 1)) {
                    *(pkt - 1) = ((_payload & 0x1F) << 3) + 0b100 + (addr_size - 2);
                    FURI_LOG_D(
                        TAG, "VALID CRC %X: dpl: %d, addr: %d", (uint16_t)crc, _payload, addr_size);
                    found = true;
                    break;
                }
            } else {
                crc = calc_crc(crc, p++, 7, 9); // PCF
                if(crc == get_shifted_crc(p)) {
                    _payload = 0;
                    found = true;
                } else {
                    for(uint8_t i = 1; i < size - addr_size - view_log_decode_CRC; i++) {
                        crc = calc_crc(crc, p++, 6, 8);
                        if(crc == get_shifted_crc(p)) {
                            _payload = i;
                            found = true;
                            break;
                        }
                    }
                }
                if(found) {
                    *(pkt - 1) = ((_payload & 0x1F) << 3) + 0b100 + (addr_size - 2);
                    FURI_LOG_D(
                        TAG, "VALID CRC %X: pl: %d, addr: %d", (uint16_t)crc, _payload, addr_size);
                    break;
                }
            }
        } else {
            uint8_t* p;
            if(addr_size == 3) {
                prevcrc = calc_crc(
                    view_log_decode_CRC == 2 ? 0xFFFF : 0xFF,
                    pkt,
                    7,
                    3 * 8); // crc for smallest addr
                p = pkt + addr_size;
            } else {
                p = pkt + addr_size - 1;
                prevcrc = calc_crc(prevcrc, p++, 7, 8);
            }
            uint32_t crc = prevcrc;
            if((view_log_decode_CRC == 1 && crc == *p) ||
               (view_log_decode_CRC == 2 && crc == (uint32_t)((*p << 8) | *(p + 1)))) {
                *(pkt - 1) = ((0 & 0x1F) << 3) + 0b000 + (addr_size - 2);
                FURI_LOG_D(TAG, "VALID CRC %X: pl: %d, addr: %d", (uint16_t)crc, 0, addr_size);
                found = true;
                break;
            }
            for(uint8_t i = 1; i <= size - addr_size - view_log_decode_CRC; i++) {
                crc = calc_crc(crc, p++, 7, 8);
                if((view_log_decode_CRC == 1 && crc == *p) ||
                   (view_log_decode_CRC == 2 && crc == (uint32_t)((*p << 8) | *(p + 1)))) {
                    *(pkt - 1) = ((i & 0x1F) << 3) + 0b000 + (addr_size - 2);
                    FURI_LOG_D(TAG, "VALID CRC %X: pl: %d, addr: %d", (uint16_t)crc, i, addr_size);
                    found = true;
                    break;
                }
            }
            if(found) break;
        }
    }
    if(found) {
        if(furi_log_get_level() == FuriLogLevelDebug) {
            char dbuf[65];
            dbuf[0] = 0;
            add_to_str_hex_bytes(dbuf, (char*)pkt, size);
            FURI_LOG_D(TAG, "PKT%02X: %s (%d)", *(pkt - 1), dbuf, size);
        }
        int16_t i = 0;
        for(; i < found_total; i++) {
            if(APP->found[i].addr_size != addr_size) continue;
            if(memcmp(APP->found[i].addr, pkt, addr_size) == 0) break;
        }
        if(i != found_total) { // found
            APP->found[i].total++;
        } else {
            uint8_t* p = APP->log_arr + 2;
            for(i = 0; i < log_arr_idx; i++, p += LOG_REC_SIZE) {
                if((*(p - 2) & 0x80) && (*(p - 1) & 0b11) + 2 == addr_size && pkt != p) {
                    if(memcmp(p, pkt, addr_size) == 0) break;
                }
            }
            if(i != log_arr_idx && found_total < MAX_FOUND_RECORDS) { // found -> 2
                memset(&APP->found[found_total], 0, sizeof(struct FOUND));
                memcpy(APP->found[found_total].addr, pkt, addr_size);
                APP->found[found_total].addr_size = addr_size;
                APP->found[found_total].total = 2;
                if(found_total == 0) view_found = 0;
                found_total++;
            }
        }
    }

    return found;
}

bool nrf24_read_newpacket() {
    if(APP->log_arr == NULL) return false;
    bool found = false;
    uint8_t packetsize;
    uint8_t* ptr = APP->log_arr + log_arr_idx * LOG_REC_SIZE;
    uint8_t st;
    /* test pkts	
	static int iii = 0;
    char ppp[][65] = { 	"54A545109411544BAAE50110A3282512A9A1152A565B22AAA48AB751A5",
						"C8C8C0CE7A81018007202FFFFC", 
						"EAEC8C8C2CE3C0101006FB737A",
						"BEBFFFEC8C8C1CC00542AF7CFF7DBEAFE3397FEAFEF1DDFA4AEF7FDBB7CDEABC",
						"FEAAAABEAAFEAAC8C8C28E1C810080490ABAF7FEEB76B7FDFEF7DFFB47FB97FE",
						"A8AAC8C8C1CE20163DF7DFFD00",
						"AFFEEFEC8C8C2CE4001010062F037F9BFFDF1DAD5EDBEF55DD9AB535FCB67F55",
						"AC8C8C1CE5F8102000D503D7ABF",
						"EE03080B4712555555550E80",
						"C8C8C41385818280127100",
						"AAC8C8C3CE05818280119000"
						"AC8C8C413858182801271000",
						"AAC8C8C40B0305028542"
					};
	if(iii < 13) {
		ConvertHexToArray(ppp[iii], ptr + 2, 32);
		st = RX_DR;
		packetsize = 32;
		iii++;
	} else
//*/
    st = nrf24_rxpacket(
        nrf24_HANDLE,
        ptr + 2 + (what_to_do == 1 ? addrs_sniff.addr_len - 2 : 0),
        &packetsize,
        what_to_do == 1 ? 32 : !NRF_DPL);
    if(st & RX_DR) {
        st = (st >> 1) & 7; // pipe #
        if(what_to_do == 1) { // SNIFF
            *ptr++ = NRF_channel | 0x80;
            *ptr++ = st; // pipe #
            if(addrs_sniff.addr_len > 2) {
                *ptr = st == 0 ? addrs_sniff.addr_P0[2] :
                       st == 1 ? addrs_sniff.addr_P1[2] :
                       st == 2 ? addrs_sniff.addr_P2 :
                       st == 3 ? addrs_sniff.addr_P3 :
                       st == 4 ? addrs_sniff.addr_P4 :
                                 addrs_sniff.addr_P5;
            }
            if(!check_packet(ptr, packetsize)) {
                if(addrs_sniff.addr_len > 2) return false; // skip if mac MSB added to preamble
                uint8_t shifted = 0;
                uint8_t shift_max = (32 - 3 - NRF_Payload_sniff_min - NRF_CRC) * 8 - 1;
                while(shifted++ <
                      shift_max) { // Shift packet left by one bit if minimum payload fits
                    uint8_t i = 0;
                    for(; i < packetsize - 1; i++) ptr[i] = (ptr[i] << 1) | (ptr[i + 1] >> 7);
                    ptr[i] <<= 1;
                    if(check_packet(ptr, packetsize - (shifted >> 3) - 1)) goto x_valid;
                }
                return false;
            }
        } else {
            *ptr++ = NRF_channel;
            *ptr++ = ((packetsize & 0x1F) << 3) | st; // payload size + pipe #
        }
    x_valid:
        if(packetsize < 32) memset(ptr + packetsize, 0, 32 - packetsize);
        if(log_arr_idx < MAX_LOG_RECORDS - 1) {
            log_arr_idx++;
        } else {
            if(log_to_file == 1 || log_to_file == 2) {
                write_to_log_file(APP->storage, false);
                clear_log();
            } else {
                memmove(APP->log_arr, APP->log_arr + LOG_REC_SIZE, log_arr_idx * LOG_REC_SIZE);
            }
        }
        FURI_LOG_D(TAG, "Found packet #%d pipe %d", log_arr_idx, st);
        notification_message(APP->notification, &sequence_blink_white_100);
        found = true;
    }
    return found;
}

bool nrf24_send_packet() {
    if(log_arr_idx == 0) return false;
    prepare_nrf24(!what_to_do);
    uint8_t* ptr = APP->log_arr + view_log_arr_idx * LOG_REC_SIZE;
    nrf24_write_reg(nrf24_HANDLE, REG_RF_CH, *ptr & 0x7F);
    if(*ptr & 0x80) { // RAW packet
        //uint8_t pktinfo = *(ptr + 1);
        //nrf24_set_maclen(nrf24_HANDLE, (pktinfo & 0b11) + 2);
        //if(pktinfo & 0b100) { // ESB
        nrf24_write_reg(nrf24_HANDLE, REG_SETUP_RETR, 0); // No Automatic Retransmission
        nrf24_write_reg(nrf24_HANDLE, REG_EN_AA, 0); // No Auto acknowledgement
        //}
        //uint8_t alen = (*(ptr + 2) & 0b11) + 2;
        uint8_t adr[2];
        adr[0] = ptr[2];
        adr[1] = ptr[3];
        nrf24_set_maclen(nrf24_HANDLE, 2);
        nrf24_set_mac(REG_RX_ADDR_P0, adr, 2);
        nrf24_set_mac(REG_TX_ADDR, adr, 2);
        last_packet_send_st = nrf24_txpacket(nrf24_HANDLE, ptr + 2 + 2, 32 - 2, true);
    } else {
        nrf24_write_reg(
            nrf24_HANDLE, REG_SETUP_RETR, NRF_ESB ? 0x11 : 0); // Automatic Retransmission
        nrf24_write_reg(
            nrf24_HANDLE, REG_EN_AA, NRF_AA_OFF || !NRF_ESB ? 0 : 0x3F); // Auto acknowledgement
        uint8_t* adr;
        uint8_t a = *(ptr + 1) & 0b111;
        if(a < 2) {
            if(a == 0)
                adr = addrs.addr_P0;
            else
                adr = addrs.addr_P1;
            nrf24_set_mac(REG_RX_ADDR_P0, adr, addrs.addr_len);
            nrf24_set_mac(REG_TX_ADDR, adr, addrs.addr_len);
        } else {
            uint8_t buf[5];
            memcpy(buf, addrs.addr_P1, addrs.addr_len - 1);
            buf[addrs.addr_len - 1] = a == 2 ? addrs.addr_P2 :
                                      a == 3 ? addrs.addr_P3 :
                                      a == 4 ? addrs.addr_P4 :
                                               addrs.addr_P5;
            nrf24_set_mac(REG_RX_ADDR_P0, buf, addrs.addr_len);
            nrf24_set_mac(REG_TX_ADDR, buf, addrs.addr_len);
        }
        a = *(ptr + 1) >> 3;
        if(a == 0) a = 32;
        nrf24_write_reg(
            nrf24_HANDLE,
            REG_CONFIG,
            0x70 | ((NRF_CRC == 1 ? 0b1000 :
                     NRF_CRC == 2 ? 0b1100 :
                                    0))); // Mask all interrupts
        nrf24_write_reg(nrf24_HANDLE, REG_DYNPD, NRF_DPL ? 0x3F : 0); // Enable dynamic payload reg
        last_packet_send_st = nrf24_txpacket(nrf24_HANDLE, ptr + 2, a, true);
    }
    last_packet_send = view_log_arr_idx;
    notification_message(
        APP->notification,
        last_packet_send_st ? &sequence_blink_blue_100 : &sequence_blink_red_100);
    if(what_to_do) start_scanning();
    return last_packet_send_st;
}

static void render_callback(Canvas* const canvas, void* ctx) {
    const PluginState* plugin_state = ctx;
    if(plugin_state == NULL) return;
    if(furi_mutex_acquire(plugin_state->mutex, 25) != FuriStatusOk) return;
    //canvas_draw_frame(canvas, 0, 0, 128, 64); // border around the edge of the screen
    if(what_doing == 0) {
        canvas_set_font(canvas, FontSecondary); // 8x10 font, 6 lines
        if(save_settings)
            snprintf(
                screen_buf, sizeof(screen_buf), "Save: %s", SETTINGS_FILENAME); // menu_selected = 0
        else
            snprintf(screen_buf, sizeof(screen_buf), "Load: %s", addr_file_name);
        canvas_draw_str(canvas, 10, 10, screen_buf);
        snprintf(screen_buf, sizeof(screen_buf), "Ch: %d", NRF_channel); // menu_selected = 1
        canvas_draw_str(canvas, 10, 20, screen_buf);
        if(NRF_ESB) {
            strcpy(screen_buf, "ESB");
            if(NRF_DPL) strcat(screen_buf, " DPL");
            canvas_draw_str(canvas, 78, 20, screen_buf);
        }
        if(NRF_AA_OFF) {
            canvas_draw_str(canvas, 61, 20, "AA");
            canvas_draw_line(canvas, 60, 21, 72, 12);
        }
        snprintf(
            screen_buf,
            sizeof(screen_buf),
            "Rate: %sbps",
            NRF_rate == 2 ? "2M" :
            NRF_rate == 1 ? "1M" :
                            "250K"); // menu_selected = 2
        canvas_draw_str(canvas, 10, 30, screen_buf);
        if(what_to_do == 1)
            snprintf(screen_buf, sizeof(screen_buf), "Min Payl: %d", NRF_Payload_sniff_min);
        else if(what_to_do >= 2) {
            uint8_t* p = APP->log_arr + view_log_arr_idx * LOG_REC_SIZE;
            snprintf(
                screen_buf,
                sizeof(screen_buf),
                "Payload: %d",
                log_arr_idx && (*p & 0x80) ? *(p + 1) >> 3 : NRF_Payload);
        } else
            snprintf(screen_buf, sizeof(screen_buf), "Payload: %d", NRF_Payload);
        canvas_draw_str(canvas, 78, 30, screen_buf);
        strcpy(screen_buf, "Next Ch time: "); // menu_selected = 3
        if(find_channel_period == 0)
            strcat(screen_buf, "off");
        else
            snprintf(
                screen_buf + strlen(screen_buf), sizeof(screen_buf), "%d s", find_channel_period);
        canvas_draw_str(canvas, 10, 40, screen_buf);
        if(NRF_CRC == 1)
            canvas_draw_str(canvas, 99, 40, "CRC1");
        else if(NRF_CRC == 2)
            canvas_draw_str(canvas, 99, 40, "CRC2");
        snprintf(
            screen_buf,
            sizeof(screen_buf),
            "Log: %s",
            log_to_file == 0 ? "No" :
            log_to_file == 1 ? "Yes" :
            log_to_file == 2 ? "Append" :
                               "Clear"); // menu_selected = 4
        canvas_draw_str(canvas, 10, 50, screen_buf);
        if(what_to_do) { // menu_selected = 5
            if(NRF_ERROR)
                snprintf(screen_buf, sizeof(screen_buf), "nRF24L01+ r/w ERROR!");
            else {
                if(what_to_do == 1)
                    snprintf(screen_buf, sizeof(screen_buf), "Start sniff");
                else {
                    uint8_t* p = APP->log_arr + view_log_arr_idx * LOG_REC_SIZE;
                    if(log_arr_idx && (*p & 0x80)) { // +RAW
                        snprintf(screen_buf, sizeof(screen_buf), "Start read: ");
                        add_to_str_hex_bytes(screen_buf, (char*)p + 2, (*(p + 1) & 0b11) + 2);
                        if(what_to_do == 2) strcpy(screen_buf + strlen(screen_buf) - 2, "* ");
                    } else
                        snprintf(
                            screen_buf,
                            sizeof(screen_buf),
                            "Start scan (pipes: %d)",
                            addrs.addr_count);
                }
            }
        } else
            snprintf(screen_buf, sizeof(screen_buf), "View log (pipes: %d)", addrs.addr_count);
        canvas_draw_str(canvas, 10, 60, screen_buf);
        canvas_draw_str(canvas, 0, menu_selected * 10 + 10, ">");
    } else if(what_doing == 1) {
        canvas_set_font(canvas, FontBatteryPercent); // 5x7 font, 9 lines
        bool ch2 = false;
        screen_buf[0] = '\0';
        if(view_log_arr_x == 0) {
            strcat(screen_buf, "  ");
            ch2 = true;
        } else {
            snprintf(screen_buf, sizeof(screen_buf), "<%d", view_log_arr_x);
            if(view_log_arr_x < VIEW_LOG_MAX_X) ch2 = true;
        }
        snprintf(
            screen_buf + strlen(screen_buf),
            sizeof(screen_buf),
            " %s ch: %d - %d.",
            what_to_do == 1 ? "Sniff" :
            what_to_do == 0 ? "View" :
                              "Read",
            NRF_channel,
            log_arr_idx);
        canvas_draw_str(canvas, 0, 7, screen_buf);
        if(ch2) canvas_draw_str(canvas, 121, 7, ">");
        if(log_arr_idx) {
            if(view_log_arr_idx >= log_arr_idx) view_log_arr_idx = log_arr_idx - 1;
            uint16_t page = view_log_arr_idx & ~7;
            for(uint8_t i = 0; i < 8 && page + i < log_arr_idx; i++) {
                screen_buf[0] = (view_log_arr_idx & 7) != i          ? ' ' :
                                last_packet_send != view_log_arr_idx ? '>' :
                                last_packet_send_st                  ? '*' :
                                                                       '!';
                screen_buf[1] = '\0';
                uint8_t* ptr = APP->log_arr + (page + i) * LOG_REC_SIZE;
                uint8_t channel = *ptr++;
                uint8_t* crcptr = NULL;
                uint8_t pre = 0;
                int count = 0;
                if(channel & 0x80) { // RAW packet: nn:>{.address..}-xxxxxxxx
                    uint8_t pktinfo = *ptr++;
                    bool _PCF = pktinfo & 0b100;
                    uint8_t plen = count = (pktinfo >> 3);
                    uint8_t adrsize = (pktinfo & 0b11) + 2;
                    plen += adrsize;
                    count += view_log_decode_CRC;
                    if(view_log_arr_x > 0) count -= view_log_arr_x - 1;
                    uint8_t max_width = VIEW_LOG_WIDTH_B;
                    if(view_log_arr_x == 0) max_width -= 5;
                    if(count > max_width) count = max_width;
                    if(count > 0) {
                        uint8_t* pcrc = ptr;
                        uint32_t crc;
                        crc = view_log_decode_CRC == 2 ? 0xFFFF : 0xFF;
                        crc = calc_crc(crc, pcrc, 7, (_PCF ? 9 : 0) + plen * 8);
                        pcrc += plen;
                        if(_PCF) { //ESB
                            pcrc++;
                            if(crc == get_shifted_crc(pcrc)) crcptr = pcrc;
                        } else {
                            if((view_log_decode_CRC == 1 && crc == *pcrc) ||
                               (view_log_decode_CRC == 2 &&
                                crc == (uint32_t)((*pcrc << 8) | *(pcrc + 1)))) {
                                crcptr = pcrc;
                            }
                        }
                        if(view_log_arr_x == 0) {
                            add_to_str_hex_bytes(screen_buf, (char*)ptr, adrsize);
                            for(int8_t j = 5 - adrsize; j > 0; j--) strcat(screen_buf, "  ");
                            strcat(screen_buf, "-");
                            pre += 5 * 2 + 1;
                        } else {
                            ptr += view_log_arr_x - 1;
                        }
                        ptr += adrsize;
                        if(_PCF)
                            add_to_str_hex_bytes_shift_9b(screen_buf, (char*)ptr++, count);
                        else
                            add_to_str_hex_bytes(screen_buf, (char*)ptr, count);
                    }
                } else {
                    uint8_t dpl = *ptr++;
                    uint8_t pipe = dpl & 0b111;
                    dpl >>= 3;
                    if(dpl == 0) dpl = 32;
                    count = dpl - view_log_arr_x;
                    if(view_log_decode_PCF) count--;
                    uint8_t max_width = VIEW_LOG_WIDTH_B;
                    if(view_log_arr_x == 0) {
                        if(addrs.addr_count > 1) max_width--;
                        if(view_log_decode_PCF) max_width -= 2;
                    }
                    if(count > max_width) count = max_width;
                    if(count > 0) {
                        if(view_log_decode_CRC) {
                            static uint16_t prev_addr_CRC;
                            static int8_t prev_pipe = -1;
                            uint8_t* pcrc = ptr;
                            uint32_t crc;
                            if(prev_pipe == pipe) {
                                crc = prev_addr_CRC;
                            } else {
                                crc = view_log_decode_CRC == 2 ? 0xFFFF : 0xFF;
                                if(pipe <= 1) {
                                    crc = calc_crc(
                                        crc,
                                        pipe == 0 ? addrs.addr_P0 : addrs.addr_P1,
                                        7,
                                        addrs.addr_len * 8);
                                } else {
                                    crc =
                                        calc_crc(crc, addrs.addr_P1, 7, (addrs.addr_len - 1) * 8);
                                    crc = calc_crc(
                                        crc,
                                        pipe == 2 ? &addrs.addr_P2 :
                                        pipe == 3 ? &addrs.addr_P3 :
                                        pipe == 4 ? &addrs.addr_P4 :
                                                    &addrs.addr_P5,
                                        7,
                                        8);
                                }
                                prev_addr_CRC = crc;
                                prev_pipe = pipe;
                            }
                            if(view_log_decode_PCF) {
                                crc = calc_crc(crc, pcrc++, 7, 9);
                                if(crc == get_shifted_crc(pcrc)) crcptr = pcrc;
                                if(crcptr == NULL) {
                                    for(int8_t j = 0; j < (int8_t)dpl - view_log_decode_CRC - 1;
                                        j++) {
                                        crc = calc_crc(crc, pcrc++, 6, 8);
                                        if(crc == get_shifted_crc(pcrc)) {
                                            crcptr = pcrc;
                                            break;
                                        }
                                    }
                                }
                            } else {
                                for(int8_t j = 0; j < (int8_t)dpl - view_log_decode_CRC; j++) {
                                    crc = calc_crc(crc, pcrc++, 7, 8);
                                    if((view_log_decode_CRC == 1 && crc == *pcrc) ||
                                       (view_log_decode_CRC == 2 &&
                                        crc == (uint32_t)((*pcrc << 8) | *(pcrc + 1)))) {
                                        crcptr = pcrc;
                                        break;
                                    }
                                }
                            }
                        }
                    }
                    ptr += view_log_arr_x;
                    if(max_width < VIEW_LOG_WIDTH_B) {
                        pre += snprintf(screen_buf + 1, 10, "%X-", pipe);
                        if(view_log_decode_PCF) {
                            pre += snprintf(
                                screen_buf + strlen(screen_buf),
                                10,
                                "%02X%01X-",
                                *ptr >> 2,
                                ((*ptr & 3) << 1) | (*(ptr + 1) >> 7));
                        }
                    }
                    if(view_log_decode_PCF)
                        add_to_str_hex_bytes_shift_9b(screen_buf, (char*)ptr++, count);
                    else
                        add_to_str_hex_bytes(screen_buf, (char*)ptr, count);
                }
                uint16_t y = 14 + i * 7;
                canvas_draw_str(canvas, 3 * 5, y, screen_buf);
                uint16_t x = page + i + 1;
                if(x > 99) {
                    snprintf(screen_buf, 16, "%d", x);
                    canvas_draw_str(canvas, 1, y, screen_buf + 1);
                    canvas_draw_frame(canvas, 0, y - 2, 1, 2);
                    x = 2;
                } else {
                    x = snprintf(screen_buf, 16, "%d", x);
                    canvas_draw_str(canvas, 0, y, screen_buf);
                }
                if(crcptr) { // 5x7 font, 9 lines
                    canvas_draw_str(canvas, x * 5, y, "=");
                    int n = crcptr - (uint8_t*)ptr;
                    if(n > -view_log_decode_CRC && n < count) {
                        int len;
                        x = (4 + pre) * 5;
                        if(n < 0) {
                            len = view_log_decode_CRC + n;
                            n = 0;
                        } else {
                            len = MIN(view_log_decode_CRC, count - n);
                            x += n * 2 * 5;
                            canvas_draw_line(canvas, x - 1, y, x - 1, y - 1);
                        }
                        canvas_draw_line(canvas, x - 1, y, n = x + len * 2 * 5 - 1, y);
                        canvas_draw_line(canvas, n, y, n, y - 1);
                    }
                } else
                    canvas_draw_str(canvas, x * 5, y, ":");
            }
        }
    } else {
        canvas_set_font(canvas, FontBatteryPercent); // 5x7 font, 9 lines
        if(view_found >= 0) {
            snprintf(screen_buf, 50, "Found > 1: %d", found_total);
            canvas_draw_str(canvas, 0, 1 * 7, screen_buf);
            int16_t idx = view_found * 7;
            for(uint8_t i = 0; i < 7; i++, idx++) {
                if(idx >= found_total) break;
                snprintf(screen_buf, 16, "%d. ", idx + 1);
                add_to_str_hex_bytes(
                    screen_buf, (char*)APP->found[idx].addr, APP->found[idx].addr_size);
                if(APP->found[idx].addr_size == 3)
                    strcat(screen_buf, "    ");
                else if(APP->found[idx].addr_size == 4)
                    strcat(screen_buf, "  ");
                snprintf(screen_buf + strlen(screen_buf), 16, " - %d", APP->found[idx].total);
                canvas_draw_str(canvas, 0, (2 + i) * 7, screen_buf);
            }
        } else {
            struct ADDRS* a;
            if(what_to_do == 1) {
                a = &addrs_sniff;
                canvas_draw_str(canvas, 0, 1 * 7, "Sniff prefix:");
            } else {
                a = &addrs;
                canvas_draw_str(canvas, 0, 1 * 7, "Addresses:");
            }
            if(a->addr_count > 0) {
                snprintf(screen_buf, sizeof(screen_buf), "P0: ");
                add_to_str_hex_bytes(screen_buf, (char*)a->addr_P0, a->addr_len);
                canvas_draw_str(canvas, 0, 2 * 7, screen_buf);
            }
            if(a->addr_count > 1) {
                snprintf(screen_buf, sizeof(screen_buf), "P1: ");
                add_to_str_hex_bytes(screen_buf, (char*)a->addr_P1, a->addr_len);
                canvas_draw_str(canvas, 0, 3 * 7, screen_buf);
            }
            if(a->addr_count > 2) {
                canvas_draw_str(canvas, 0, 4 * 7, "P2: ");
                snprintf(screen_buf, sizeof(screen_buf), "%02X", a->addr_P2);
                canvas_draw_str(canvas, (4 + (a->addr_len - 1) * 2) * 5, 4 * 7, screen_buf);
            }
            if(a->addr_count > 3) {
                canvas_draw_str(canvas, 0, 5 * 7, "P3: ");
                snprintf(screen_buf, sizeof(screen_buf), "%02X", a->addr_P3);
                canvas_draw_str(canvas, (4 + (a->addr_len - 1) * 2) * 5, 5 * 7, screen_buf);
            }
            if(a->addr_count > 4) {
                canvas_draw_str(canvas, 0, 6 * 7, "P4: ");
                snprintf(screen_buf, sizeof(screen_buf), "%02X", a->addr_P4);
                canvas_draw_str(canvas, (4 + (a->addr_len - 1) * 2) * 5, 6 * 7, screen_buf);
            }
            if(a->addr_count > 5) {
                canvas_draw_str(canvas, 0, 7 * 7, "P5: ");
                snprintf(screen_buf, sizeof(screen_buf), "%02X", a->addr_P5);
                canvas_draw_str(canvas, (4 + (a->addr_len - 1) * 2) * 5, 7 * 7, screen_buf);
            }
        }
        if(log_arr_idx) {
            uint8_t* ptr = APP->log_arr + view_log_arr_idx * LOG_REC_SIZE;
            uint8_t pktinfo = *(ptr + 1);
            snprintf(screen_buf, 32, ">Ch: %d L: %d", *ptr & 0x7F, pktinfo >> 3);
            if(*ptr & 0x80) {
                strcat(screen_buf, " RAW");
                if(pktinfo & 0b100) {
                    snprintf(
                        screen_buf + strlen(screen_buf),
                        16,
                        " ESB %s",
                        *(ptr + 2 + (pktinfo & 0b11) + 2) >> 2 != 0x33 ? "DPL" : "");
                }
            }
            canvas_draw_str(canvas, 0, 8 * 7, screen_buf);
        }
        screen_buf[0] = 'v';
        strcpy(screen_buf + 1, VERSION);
        canvas_draw_str(canvas, 105, 7, screen_buf);
        if(view_log_decode_PCF || view_log_decode_CRC) {
            strcpy(screen_buf, "Decode: ");
            if(view_log_decode_PCF) strcat(screen_buf, "ESB ");
            if(view_log_decode_CRC == 1)
                strcat(screen_buf, "CRC1");
            else if(view_log_decode_CRC == 2)
                strcat(screen_buf, "CRC2");
            canvas_draw_str(canvas, 0, 64, screen_buf);
        }
    }
    furi_mutex_release(plugin_state->mutex);
}

int32_t nrf24scan_app(void* p) {
    UNUSED(p);
    APP = malloc(sizeof(Nrf24Scan));
    APP->event_queue = furi_message_queue_alloc(8, sizeof(PluginEvent));
    PluginState* plugin_state = malloc(sizeof(PluginState));
    plugin_state->mutex = furi_mutex_alloc(FuriMutexTypeNormal);
    if(!plugin_state->mutex) {
        furi_message_queue_free(APP->event_queue);
        FURI_LOG_E(TAG, "cannot create mutex");
        free(plugin_state);
        return 255;
    }
    APP->log_arr = malloc(LOG_REC_SIZE * MAX_LOG_RECORDS);
    if(APP->log_arr == NULL) {
        FURI_LOG_E(TAG, "Not enouch memory: %d", LOG_REC_SIZE * MAX_LOG_RECORDS);
        strcpy(addr_file_name, "MEMORY LOW!");
    }
    clear_log();
    APP->found = malloc(sizeof(struct FOUND) * MAX_FOUND_RECORDS);
    if(APP->found == NULL) {
        FURI_LOG_E(TAG, "Not enouch memory: %d", sizeof(struct FOUND) * MAX_FOUND_RECORDS);
        strcpy(addr_file_name, "MEMORY LOW!!");
    }

    memset((uint8_t*)&addrs, 0, sizeof(addrs));
    memset((uint8_t*)&addrs_sniff, 0, sizeof(addrs_sniff));
    if(!furi_hal_power_is_otg_enabled()) {
        furi_hal_power_enable_otg();
        NRF_BOARD_POWER_5V = true;
        furi_delay_ms(100);
    }
    nrf24_init();

    // Set system callbacks
    APP->view_port = view_port_alloc();
    view_port_draw_callback_set(APP->view_port, render_callback, plugin_state);
    view_port_input_callback_set(APP->view_port, input_callback, APP->event_queue);

    // Open GUI and register view_port
    APP->gui = furi_record_open(RECORD_GUI);
    gui_add_view_port(APP->gui, APP->view_port, GuiLayerFullscreen);
    APP->notification = furi_record_open(RECORD_NOTIFICATION);
    APP->storage = furi_record_open(RECORD_STORAGE);
    storage_common_migrate(APP->storage, EXT_PATH("nrf24scan"), SCAN_APP_PATH_FOLDER);
    storage_common_mkdir(APP->storage, SCAN_APP_PATH_FOLDER);
    Stream* file_stream = file_stream_alloc(APP->storage);
    FuriString* path = furi_string_alloc();
    furi_string_set(path, SCAN_APP_PATH_FOLDER);
    furi_string_cat(path, "/");
    furi_string_cat(path, SNIFF_FILENAME);
    if(file_stream_open(file_stream, furi_string_get_cstr(path), FSAM_READ, FSOM_OPEN_EXISTING)) {
        uint8_t err = load_settings_file(file_stream);
        if(!err)
            strncpy(
                addr_file_name,
                furi_string_get_cstr(path) + sizeof(SCAN_APP_PATH_FOLDER),
                sizeof(addr_file_name));
        else
            snprintf(addr_file_name, sizeof(addr_file_name), "LOAD ERROR#%d", err);
    } else {
        strcpy(addr_file_name, "NONE");
        if(what_to_do == 1) {
            addrs.addr_P0[0] = 0;
            addrs.addr_P0[1] = 0x55;
            addrs.addr_len = 2;
            addrs.addr_count = 1;
            view_log_decode_CRC = NRF_CRC = 2;
            NRF_Payload_sniff_min = 0; // Min
        }
    }
    file_stream_close(file_stream);
    stream_free(file_stream);
    furi_string_free(path);

    PluginEvent event;
    for(bool processing = true; processing;) {
        FuriStatus event_status = furi_message_queue_get(APP->event_queue, &event, 100);
        furi_mutex_acquire(plugin_state->mutex, FuriWaitForever);

        if(event_status == FuriStatusOk) {
            // press events
            if(event.type == EventTypeKey) {
                //FURI_LOG_D(TAG, "Key: %d Type: %d Sec: %u", event.input.key, event.input.type, event.input.sequence);
                switch(event.input.key) {
                case InputKeyUp:
                    if(event.input.type == InputTypeShort || event.input.type == InputTypeRepeat) {
                        if(what_doing == 0) {
                            if(menu_selected > 0)
                                menu_selected--;
                            else
                                menu_selected = menu_selected_max;
                        } else if(what_doing == 1) {
                            view_log_arr_idx -= event.input.type == InputTypeRepeat ? 10 : 1;
                            if(view_log_arr_idx >= log_arr_idx) view_log_arr_idx = 0;
                        } else if(what_doing == 2) {
                            if(view_found > -1) view_found--;
                        }
                    }
                    break;
                case InputKeyDown:
                    if(event.input.type == InputTypeShort || event.input.type == InputTypeRepeat) {
                        if(what_doing == 0) {
                            if(menu_selected < menu_selected_max)
                                menu_selected++;
                            else
                                menu_selected = 0;
                        } else if(what_doing == 1) {
                            if(log_arr_idx == 0)
                                view_log_arr_idx = 0;
                            else {
                                view_log_arr_idx += event.input.type == InputTypeRepeat ? 10 : 1;
                                if(view_log_arr_idx >= log_arr_idx)
                                    view_log_arr_idx = log_arr_idx - 1;
                            }
                        } else if(what_doing == 2) {
                            if(view_found < found_total / 7) view_found++;
                        }
                    }
                    break;
                case InputKeyLeft:
                    if(event.input.type == InputTypeShort || event.input.type == InputTypeRepeat) {
                        if(what_doing == 0) {
                            switch(menu_selected) {
                            case Menu_enter_channel:
                                NRF_channel -= event.input.type == InputTypeRepeat ? 10 : 1;
                                if(NRF_channel > MAX_CHANNEL) NRF_channel = MAX_CHANNEL;
                                break;
                            case Menu_enter_rate:
                                if(what_to_do == 1) { // SNIFF
                                    NRF_Payload_sniff_min -=
                                        event.input.type == InputTypeRepeat ? 10 : 1;
                                    correct_NRF_Payload_sniff_min();
                                } else {
                                    NRF_Payload -= event.input.type == InputTypeRepeat ? 10 : 1;
                                    if(NRF_Payload > 32) NRF_Payload = 0;
                                }
                                break;
                            case Menu_enter_scan_period:
                                find_channel_period -= event.input.type == InputTypeRepeat ? 10 :
                                                                                             1;
                                if(find_channel_period < 0) find_channel_period = 0;
                                break;
                            case Menu_log:
                                if(--log_to_file < -1) log_to_file = 2;
                                break;
                            case Menu_ok:
                                if(--what_to_do > 3) what_to_do = 3;
                                break;
                            }
                        } else if(what_doing == 1) {
                            if(view_log_arr_x > 0) view_log_arr_x--;
                        } else if(what_doing == 2) {
                            //if(NRF_ESB == 0)
                            view_log_decode_PCF ^= 1;
                        }
                    }
                    break;
                case InputKeyRight:
                    if(event.input.type == InputTypeShort || event.input.type == InputTypeRepeat) {
                        if(what_doing == 0) {
                            switch(menu_selected) {
                            case Menu_open_file:
                                save_settings ^= 1;
                                break;
                            case Menu_enter_channel:
                                NRF_channel += event.input.type == InputTypeRepeat ? 10 : 1;
                                if(NRF_channel > MAX_CHANNEL) NRF_channel = 0;
                                break;
                            case Menu_enter_rate:
                                if(what_to_do == 1) { // SNIFF
                                    NRF_Payload_sniff_min +=
                                        event.input.type == InputTypeRepeat ? 10 : 1;
                                    correct_NRF_Payload_sniff_min();
                                } else {
                                    NRF_Payload += event.input.type == InputTypeRepeat ? 10 : 1;
                                    if(NRF_Payload > 32) NRF_Payload = 32;
                                }
                                break;
                            case Menu_enter_scan_period:
                                find_channel_period += event.input.type == InputTypeRepeat ? 10 :
                                                                                             1;
                                break;
                            case Menu_log:
                                if(++log_to_file > 2) log_to_file = -1;
                                break;
                            case Menu_ok:
                                if(++what_to_do > 3) what_to_do = 0;
                                break;
                            }
                        } else if(what_doing == 1) {
                            if(view_log_arr_x < VIEW_LOG_MAX_X) view_log_arr_x++;
                        } else if(what_doing == 2) {
                            if(++view_log_decode_CRC > 2) view_log_decode_CRC = 0;
                        }
                    }
                    break;
                case InputKeyOk:
                    if(event.input.type == InputTypeShort) {
                        if(what_doing == 0) {
                            switch(menu_selected) {
                            case Menu_open_file:
                                if(save_settings) {
                                    write_to_log_file(APP->storage, true);
                                } else {
                                    file_stream = file_stream_alloc(APP->storage);
                                    if(select_settings_file(file_stream)) {
                                        uint8_t err = load_settings_file(file_stream);
                                        if(!err)
                                            save_to_new_log = true;
                                        else
                                            snprintf(
                                                addr_file_name,
                                                sizeof(addr_file_name),
                                                "LOAD ERROR#%d",
                                                err);
                                        file_stream_close(file_stream);
                                        menu_selected = Menu_ok;
                                    }
                                    stream_free(file_stream);
                                }
                                break;
                            case Menu_enter_channel:
                                if(what_to_do == 1) {
                                    if(NRF_ESB)
                                        NRF_DPL = NRF_ESB = 0;
                                    else
                                        NRF_ESB = 1;
                                } else {
                                    if(NRF_ESB) {
                                        if(NRF_DPL)
                                            NRF_DPL = NRF_ESB = 0;
                                        else
                                            NRF_DPL = 1;
                                    } else
                                        NRF_ESB = 1;
                                }
                                break;
                            case Menu_enter_rate:
                                NRF_rate++;
                                if(NRF_rate > 2) NRF_rate = 0;
                                break;
                            case Menu_enter_scan_period:
                                if(++NRF_CRC > 2) NRF_CRC = what_to_do == 1 ? 1 : 0;
                                break;
                            case Menu_ok:
                                if(what_to_do) {
                                    if((addrs.addr_count ||
                                        (what_to_do >= 2 && log_arr_idx &&
                                         *(APP->log_arr + view_log_arr_idx * LOG_REC_SIZE) &
                                             0x80)) ||
                                       what_to_do == 1) {
                                        if(log_to_file == -1) {
                                            log_to_file = 0;
                                            clear_log();
                                            save_to_new_log = true;
                                        } else if(log_to_file == 1)
                                            save_to_new_log = true;
                                        start_scanning();
                                        if(!NRF_ERROR) what_doing = 1;
                                    }
                                } else
                                    what_doing = 1;
                                break;
                            }
                        } else if(what_doing == 1) {
                            what_doing = 2;
                        } else if(what_doing == 2) {
                            what_doing = 1;
                        }
                    } else if(event.input.type == InputTypeLong) {
                        if(what_doing == 0) {
                            if(menu_selected == Menu_enter_channel) {
                                NRF_AA_OFF ^= 1;
                            } else if(menu_selected == Menu_log) { // Log
                                if(log_arr_idx && (log_to_file == 1 || log_to_file == 2)) {
                                    write_to_log_file(APP->storage, false);
                                    clear_log();
                                }
                            }
                        } else if(what_doing == 1 || what_doing == 2) {
                            nrf24_send_packet();
                        }
                    }
                    break;
                case InputKeyBack:
                    if(event.input.type == InputTypeLong)
                        processing = false;
                    else if(event.input.type == InputTypeShort) {
                        if(what_doing) what_doing--;
                        if(what_doing == 0) {
                            nrf24_set_idle(nrf24_HANDLE);
                        }
                    }
                    break;
                default:
                    break;
                }
            }
        }
        if(what_doing && what_to_do) {
            nrf24_read_newpacket();
            if(find_channel_period &&
               furi_get_tick() - start_time >= (uint32_t)find_channel_period * 1000UL) {
                if(++NRF_channel > MAX_CHANNEL) NRF_channel = 0;
                start_scanning();
            }
        }

        furi_mutex_release(plugin_state->mutex);
        view_port_update(APP->view_port);
    }
    nrf24_set_idle(nrf24_HANDLE);
    if(log_arr_idx && (log_to_file == 1 || log_to_file == 2)) {
        write_to_log_file(APP->storage, false);
    }
    nrf24_deinit();
    if(NRF_BOARD_POWER_5V) furi_hal_power_disable_otg();

    view_port_enabled_set(APP->view_port, false);
    gui_remove_view_port(APP->gui, APP->view_port);
    furi_record_close(RECORD_GUI);
    furi_record_close(RECORD_NOTIFICATION);
    furi_record_close(RECORD_STORAGE);
    view_port_free(APP->view_port);
    furi_message_queue_free(APP->event_queue);
    if(APP->log_arr) free(APP->log_arr);
    if(APP->found) free(APP->found);
    furi_mutex_free(plugin_state->mutex);
    free(plugin_state);
    free(APP);
    return 0;
}