Setup Linptech Human Presence Sensor ES3 without Xiaomi Gateway

[lgolberg]

Does anyone knows if it possible to setup BLE Linptech ES3 sensor w/o Xiaomi gateway, so it can be discovered by ble_monitor?

Here is some data from sensor when it is in pairing mode:

Found 1 BLE devices:
  Name: Mijiademo, Address: 48DB8D9A-EB7B-CDA5-9685-53BD40756A4C
 Advertizement data:: AdvertisementData(local_name='linp.sensor_occupy.es2', service_data={'0000fe95-0000-1000-8000-00805f9b34fb': b'0X\xfbP\x00\xb0qb8\xc1\xa4\x08'}, rssi=-42)

Service UUID: 0000fe95-0000-1000-8000-00805f9b34fb
  Found 8 characteristics:
    Characteristic UUID: 00000004-0000-1000-8000-00805f9b34fb
      Properties: ['read']
     Value : bytearray(b'2.1.1_0048\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00')
      Value (decoded): 2.1.1_0048
    Characteristic UUID: 00000010-0000-1000-8000-00805f9b34fb
      Properties: ['write-without-response', 'notify']
    Characteristic UUID: 00000017-0000-1000-8000-00805f9b34fb
      Properties: ['write', 'notify']
    Characteristic UUID: 00000018-0000-1000-8000-00805f9b34fb
      Properties: ['write-without-response', 'notify']
    Characteristic UUID: 00000019-0000-1000-8000-00805f9b34fb
      Properties: ['write-without-response', 'notify']
    Characteristic UUID: 0000001a-0000-1000-8000-00805f9b34fb
      Properties: ['write-without-response', 'notify']
    Characteristic UUID: 0000001b-0000-1000-8000-00805f9b34fb
      Properties: ['write-without-response', 'notify']
    Characteristic UUID: 0000001c-0000-1000-8000-00805f9b34fb
      Properties: ['write-without-response', 'notify']

When trying to write single byte '0x01' data to "0000001c-0000-1000-8000-00805f9b34fb"- it updates to 0x01-04-30-30-35-35
Any other byte values results in '0x02-<byte value>-02', ex: 0x03 -> 0x02-03-02

Writing any data to other 'write-without-response' characteristic simply stores unmodified data in that characteristic.