Jump to navigation Jump to search
70 bytes added ,  03:04, 22 October 2020
no edit summary
[[File:TH-D74A.jpg|none|thumb|Fully Assembled Kenwood TH-D74A|alt=]]Full teardown pictures and videos of the TH-D74 along with notes on reverse engineering and obtaining a copy of the firmware. 
==Teardown Video==
6 minute video @ 3x playback speed showing full disassembly of the radio with commentary, full length video with no audio [ here].
=====Serial Port=====
The serial port turned out to just be control data sent from the CPU board to the transceiver board, explained further below. Removing the flash memory is an option although it is a BGA package so not sure about soldering wires to it so it can be read out. Furthermore, the OMAP-L138<ref>Texas Instruments Component</ref> processor seems to have a few protection mechanisms. Encryption of the firmware is one of them so that route might be useless.
====Hardware Attack====
[ IC-707 - Not exact match but same family - WM8940]
<br />
== References ==<br /><references />

Navigation menu