Skip to content
Travis Goodspeed edited this page Sep 8, 2016 · 7 revisions

Welcome to the md380tools wiki! For now, it can only be edited by the project's collaborators.

Project Status

MD380Tools is a collection of Python scripts and firmware patches the Tytera MD380, which is also known as the Retevis RT3.

Usage and Introduction

Hardware Documentation

Our firmware was initially ported to the MD380 Hardware, but we will soon also support the MD390 GPS Hardware. Additional radios from Tytera and Connect Systems might also be supported in the future.

Firmware Reverse Engineering

We've been reverse engineering the MD380 firmware with IDA Pro and Radare2, as well as some homegrown tools that you'll find in the repository.

The firmware runs on an STM32F405 with 1MB of Flash and 192K of non-contiguous RAM. Radio functions are managed by the C5000 Baseband chip, while the audio codec chip is emulated by a background process on the CPU.

The Memory Map page describes the firmware layout. Firmware Symbols explains how functions are identified within the firmware. Graphics and Fonts have also been reverse engineered and improved.

Clone this wiki locally