Home

Awesome

UV_K5_playground

To support ongoing work, you can make a donation.

src/messenger auto release build

messenger
AFSK messenger with T9 typing support

src/spectrum_fagci auto release build

Spectrum scanner by @fagci

spectrum_fagci

more videos

download mod

Features:

How to start:

How to operate:

src/spectrum auto release build

spectrum
update
Spectrum scanner. It prints a spectrum graph. Zoom in well as resolution can be controled via keyboard.

src/rssi_sbar auto release build

rssi printer
sbar with calibrated S steps, on TX prints mic in amplitude

src/rssi_printer auto release build

rssi printer
mod for printing rx signal level (RSSI) in numerical format, also includes small signal level chart.

uploading to radio

src/pong auto release build

rssi printer
this is useless

flash masking and memory layout

Chinese mcu DP32G030 has feature called flash masking, here is how it works: original_memory layout

libs/k5_uv_system (par_runner)

The idea is to run this firmware 'parallel' with the original Quencheng firmware. This can be achieved by relocating the original vector table to the end of the original firmware, and placing a new vector table at the beginning, with entities pointing to the par_runner functions that wrap the original firmware handlers.
Every interrupt is first processed by the par_runner handlers, which can perform some tasks, before invoking the original firmware handler

flash memory layout

When building the "par_runner" target automaticly "bootloader" target will be build memory layout building UV_K5_Playground target will result in following outputs:

To change the original firmware that will be wrapped and placed into the original firmware section, replace ./original_fw/original_fw.bin or set the variable CMakeLists.txt set(ORGINAL_FW_BIN orginal_fw.bin) in ./orginal_fw/CMakeLists.txt and rebuild par_runner

build system installation

currently tested on windows, requred:

All folders with executables of the above programs should be added to the PATH environment variable.

After cloning repo init submodules:
$ git submodule update --init --recursive
install dependencies needed by fw_pack.py
$ pip install pyserial

for debugging:

building

via terminal

$ mkdir build $ cd build $ cmake ../ -G Ninja
for all targets:
$ ninja
for specific target:
$ ninja target_name
current targets: pong, rssi_printer, rssi_sbar, messenger, most_useless_mod, spectrum
to build binary that can be uploaded by quancheng fw update tool use _encoded suffix for example:
$ ninja rssi_sbar_encoded

uploading via openocd

$ ninja rssi_sbar_flash

via VS Code

Select the specific build target in the bottom bar and press build.

uploading

Enter the 'Run & Debug' tab, select 'kwaczek DBG', and press run.

links

Warning

I'm not responsible for radios bricked by this trojan xD