NiccoloIU2KIN wrote: ↑Sat Mar 28, 2020 8:52 amHi ZL1GW,
I'm catching up with this post, we managed to craft a firmware which can be flashed
and loaded from the TYT recovery.
For the flashing part we were lucky and my radio is compatible with the "wrapping"
scripts from md380tools, however booting the thing was non trivial.
In the end we cracked it, as IU2KWO discovered the TYT recovery is basically the
STM32 USB DFU example, with a few modifications. Before jumping in the firmware,
it checks if two buttons are pressed and performs a bit mask check on the stack
Hope you can crack your shitty encryption soon, we'll start working on the display
and keyboards and seems that we can share the effort there!
Is the firmware encryption the same on the UV-380 / RT3S as the MD-380