Project

General

Profile

Actions

New Model #1667

closed

Wouxun KG-UV8D

Added by Pat Colagreco over 10 years ago. Updated over 4 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Category:
-
Target version:
Start date:
05/30/2014
Due date:
% Done:

100%

Estimated time:
Equipment Loan/Gift Offered:
Yes
I read the instructions above:

Description

Requesting development of compatibility for the Wouxun KG-UV8D
I have had the radio for a few weeks now.
The included factory Wouxun software is practically unuseable.
It corrupts the functionality of the radio when saving information into the radio. Needs factory reset at that point in time.


Files

KGUV8D-Read.txt (227 KB) KGUV8D-Read.txt Factory Software reading from the radio Ron Wellsted, 09/13/2014 08:01 AM
KGUV8D-Write.txt (201 KB) KGUV8D-Write.txt factory software writing to the radio Ron Wellsted, 09/13/2014 08:01 AM
KGUV8D-FrequencyLimit.txt (3.07 KB) KGUV8D-FrequencyLimit.txt extra afctory software reading & setting frequency limits Ron Wellsted, 09/13/2014 08:01 AM
KG-UV8D.pdf (14.2 KB) KG-UV8D.pdf Printout from factory software of the settings Ron Wellsted, 09/13/2014 08:01 AM
debug.log (23.4 KB) debug.log Jim Bergstresser, 10/16/2014 07:10 AM

Related issues 3 (0 open3 closed)

Has duplicate New Model #1711: Wouxun KG-UV8DRejectedGary Greer06/22/2014

Actions
Has duplicate New Model #1723: KG-UV8DRejected06/29/2014

Actions
Has duplicate New Model #1725: Wouxun KG-UV8DRejected06/30/2014

Actions

Updated by Ron Wellsted about 10 years ago

I have one of these radios and have started to get chirp to work with it.

The attached files are the ones I am using to revese engineer the protocol and memory locations.

Actions #2

Updated by Ron Wellsted about 10 years ago

What has been decoded so far:
Serial coms are at 19200 baud and the data is passed in variable length
records with a checksum.

Record structure:
Offset Usage
0 start of record (\x7d)
1 Command (\x80 Identify \x81 End/Reboot \x82 Read \x83 Write)
2 direction (\xff PC-> Radio, \x00 Radio -> PC)
3 length of payload (excluding header/checksum) (n)
4 payload (n bytes)
4+n+1 checksum - byte sum (% 256) of bytes 1 -> 4+n

Memory Read Records:
the request payload is 3 bytes, first 2 are offset (big endian), 3rd is
number of bytes to read

Memory Write Records:
The maximum payload size (from the Wouxun software) seems to be 66 bytes
(2 bytes location + 64 bytes data).

I have got as far as getting Chirp to successfully identify the radio.

A Gotcha: the first identify packet returns a bad checksum, subsequent
attempts return the correct checksum... (well it does on my radio!)

The ID record returned by the radio also includes the current frequency
range as 4 bytes big endian in 10Hz increments

Offset
00:10 Model, zero padded (Use first 7 chars for 'KG-UV8D')
11:14 UHF lower limit 1 (in units of 10Hz)
15:18 UHF upper limit 1
19:22 UHF lower limit 2
23:26 UHF upper limit 2
27:30 VHF lower limit 1
31:34 VHF upper limit 1
35:38 VHF lower limit 2
39:42 VHF upper limit 2

Limit 1 = Rx and Limit 2 = Tx (just my guess!)

Actions #3

Updated by Ron Wellsted about 10 years ago

Present status:
I have got support for identifying and reading the memory from the radio. By a long process of changing either 1 menu item or factory software setting at a time and downloading the memory, I have determined the following memory layout: (Structure member names starting with an x e.g. x0845, are ones I have not been able to determine yet)
#seekto 0x0044;
struct {
u32 rx_freq;
u32 tx_freq;
} uhf_limits;

#seekto 0x0054;
struct {
  u32   rx_freq;
  u32   tx_freq;
} vhf_limits;

#seekto 0x0400;
struct {
  char  model[8];
  char  unknown[2];
  char  oem1[10];
  char  oem2[10];
  char  unknown2[8];
  char  version[10];
  u8    unknown3[6];
  char  date[8];
} oem_info;

#seekto 0x0480;
struct {
  u16    lower;
  u16    upper;     
} scan_groups[10];

#seekto 0x0500;
struct {
  u8   call_code[6];
} call_groups[20];

#seekto 0x0580;
struct {
  char  call_name[6];
} call_group_name[20];

#seekto 0x0800;
struct {
  u8    ponmsg;
  char  dispstr[15];
  u8    voice;
  u8    timeout;
  u8    toalarm;
  u8    channel_menu;
  u8    save;
  u8    autolock;
  u8    keylock;
  u8    beep;
  u8    stopwatch;
  u8    vox;
  u8    scan_rev;
  u8    backlight;
  u8    roger_beep;
  u8    mode_sw_pwd[6];
  u8    reset_pwd[6];
  u16   pri_ch;
  u8    ani_sw;
  u8    ptt_delay;
  u8    ani[6];
  u8    dtmf_st;
  u8    bcl_a;
  u8    bcl_b;
  u8    ptt_id;
  u8    prich_sw;
  u8    rpt_set;
  u8    rpt_spk;
  u8    rpt_ptt;
  u8    alert;
  u8    pf1_func;
  u8    pf3_func;
  u8    workmode_a;
  u8    workmode_b;
  u8 x0845;
  u8    dtmf_tx_time;
  u8    dtmf_interval;
  u8    main_ab;
  u16   work_cha;
  u16   work_chb;
  u8 x084d;
  u8 x084e;
  u8 x084f;
  u8 x0850;
  u8 x0851;
  u8 x0852;
  u8 x0853;
  u8 x0854;
  u8    rpt_mode;
  u8    language;
  u8 x0857;
  u8 x0858;
  u8 x0859;
  u8 x085a;
  u8 x085b;
  u8 x085c;
  u8 x085d;
  u8 x085e;
  u8    single_display;
  u8    ring;
  u8    scg_a;
  u8    scg_b;
  u8 x0863;
  u8    rpt_tone;
  u8    rpt_hold;
  u8    scan_det;
  u8    sc_qt;
  u8 x0868;
  u8    smuteset;
  u8    callcode;
} settings;

#seekto 0x0880;
struct {
  u32   rxfreq;
  u32   txoffset;
  u16   rxtone;
  u16   txtone;
  u8    unknown1:4,
    scan:1
        power:1,
        unknown2:1;
  u8    unknown3:1,
    shift_dir:2
    unknown4:2,
    mute_mode:2,
    wide_fm:1;
  u8    step;
  u8    squelch;
  } vfoa;

#seekto 0x08c0;
struct {
  u32   rxfreq;
  u32   txoffset;
  u16   rxtone;
  u16   txtone;
  u8    unknown1:4,
    scan:1
        power:1,
        unknown2:1;
  u8    unknown3:1,
    shift_dir:2
    unknown4:2,
    mute_mode:2,
    wide_fm:1;
  u8    step;
  u8    squelch;
} vfob;

#seekto 0x0900;
struct {
    u32 rxfreq;
    u32 txfreq;
    u16 rxtone;
    u16 txtone;
    u8  unknown1:4,
    scan:1
        power:1,
        unknown2:1;
    u8  unknown3:2,
    scan_add:1,
    unknown4:2,
    mute_mode:2,
    wide_fm:1;
    u16 padding;
} memory[1000];

#seekto 0x4780;
struct {
    char name[8];
} names[1000];

#seekto 0x6700;
u8 valid[1000];
Actions #4

Updated by Ron Wellsted about 10 years ago

Corrected memory layout:

#seekto 0x0044;
struct {
u32 rx_start;
u32 rx_stop;
u32 tx_start;
u32 tx_stop;
} uhf_limits;

#seekto 0x0054;
struct {
u32 rx_start;
u32 rx_stop;
u32 tx_start;
u32 tx_stop;
} vhf_limits;

#seekto 0x0400;
struct {
char    model[8];
u8  unknown[2];
char    oem1[10];
char    oem2[10];
char    unknown2[8];
char    version[10];
u8  unknown3[6];
char    date[8];
} oem_info;

#seekto 0x0480;
struct {
u16 lower;
u16 upper;     
} scan_groups[10];

#seekto 0x0500;
struct {
u8  call_code[6];
} call_groups[20];

#seekto 0x0580;
struct {
char    call_name[6];
} call_group_name[20];

#seekto 0x0800;
struct {
u8  ponmsg;
char    dispstr[15];
u8 x0810;
u8 x0811;
u8 x0812;
u8 x0813;
u8 x0814;
u8  voice;
u8  timeout;
u8  toalarm;
u8  channel_menu;
u8  power_save;
u8  autolock;
u8      keylock;
u8      beep;
u8      stopwatch;
u8      vox;
u8      scan_rev;
u8      backlight;
u8      roger_beep;
u8      mode_sw_pwd[6];
u8      reset_pwd[6];
u16     pri_ch;
u8      ani_sw;
u8      ptt_delay;
u8      ani[6];
u8      dtmf_st;
u8      bcl_a;
u8      bcl_b;
u8      ptt_id;
u8      prich_sw;
u8      rpt_set;
u8      rpt_spk;
u8      rpt_ptt;
u8      alert;
u8      pf1_func;
u8      pf3_func;
u8      workmode_a;
u8      workmode_b;
u8 x0845;
u8      dtmf_tx_time;
u8      dtmf_interval;
u8      main_ab;
u16     work_cha;
u16     work_chb;
u8 x084d;
u8 x084e;
u8 x084f;
u8 x0850;
u8 x0851;
u8 x0852;
u8 x0853;
u8 x0854;
u8      rpt_mode;
u8      language;
u8 x0857;
u8 x0858;
u8 x0859;
u8 x085a;
u8 x085b;
u8 x085c;
u8 x085d;
u8 x085e;
u8      single_display;
u8      ring;
u8      scg_a;
u8      scg_b;
u8 x0863;
u8      rpt_tone;
u8      rpt_hold;
u8      scan_det;
u8      sc_qt;
u8 x0868;
u8      smuteset;
u8      callcode;
} settings;

#seekto 0x0880;
struct {
  u32   rxfreq;
  u32   txoffset;
  u16   rxtone;
  u16   txtone;
  u8    unknown1:5,
    power:1,
    unknown2:2;
  u8        unknown3:1,
    shift_dir:2
    unknown4:2,
    mute_mode:2,
    iswide:1;
  u8        step;
  u8        squelch;
  } vfoa;

#seekto 0x08c0;
struct {
u32 rxfreq;
u32 txoffset;
u16 rxtone;
u16 txtone;
u8      unknown1:5,
    power:1,
    unknown2:2;
u8      unknown3:1,
    shift_dir:2,
    unknown4:2,
    mute_mode:2,
    iswide:1;
u8      step;
u8      squelch;
} vfob;

#seekto 0x0900;
struct {
    u32     rxfreq;
    u32     txfreq;
    u16     rxtone;
    u16     txtone;
    u8      unknown1:5,
    power:1,
    unknown2:2;
    u8      unknown3:2,
    scan_add:1,
    unknown4:2,
    mute_mode:2,
    iswide:1;
    u16 padding;
} memory[1000];

#seekto 0x4780;
struct {
    char    name[8];
} names[1000];

#seekto 0x6700;
u8 valid[1000];
Actions #5

Updated by Dan Smith about 10 years ago

  • Assignee set to Ron Wellsted
Actions #6

Updated by Ron Wellsted about 10 years ago

  • Status changed from New to In Progress
  • Target version set to 0.5.0
  • % Done changed from 0 to 20

Alpha test version

Actions #7

Updated by John LaMartina about 10 years ago

This mornings beta ...
.
Although CHIRP shows Wouxun UV8D in the selection menu,
CHIRP will not allow the Download to take place.

John
http://www.miklor.com

Actions #8

Updated by Jim Bergstresser about 10 years ago

Error when importing from data source. Chirp never adds selected frequencies to import.

Actions #9

Updated by Dan Smith about 10 years ago

Jim, that looks like a separate issue. Could you open a separate bug (assigned to Ron) for that?

Thanks!

Actions #10

Updated by Stephen Cavilia about 10 years ago

This seems to be mostly working, however I noticed a few issues trying to add new memory channels that were otherwise empty from chirp. Most settings are stored correctly except high/low power (always reads as L on channels that are are actually H) and some weird mute mode gets programmed on the new channels which can be cleared on the radio's menu (but it takes a couple extra button clicks to let you change it, it's as if the firmware is confused by an invalid value in memory at first and doesn't enter the menu correctly). Has anyone else noticed this? My radio has V1.05 "Sain Sonic" firmware dated 20141013.

I'll do some more poking around with memory dumps when I have more time.

A few times I would get "string index out of range" errors trying to connect:
File "/usr/lib64/python2.7/site-packages/chirp/kguv8d.py", line 397, in _download
raise errors.RadioError("Failed to communicate with radio: %s" % e)
RadioError: Failed to communicate with radio: string index out of range

Also does anyone know if this model has a transmit disable setting? On the UV6D you could set the duplex column to "off" to block transmitting on a certain memory channel, useful for receive-only frequencies like weather channels.

Actions #11

Updated by Stephen Cavilia about 10 years ago

Looks like the power setting is actually the high bit of "unknown2"

(first channel dump is high, second is low, both show up as low in chirp)

struct {
rxfreq: 0x00DF9260
txfreq: 0x00DF9260
rxtone: 0x0000
txtone: 0x0000
unknown1: 0x00 (...00000b)
power: 0x00 (.......0b)
unknown2: 0x02 (......10b)
unknown3: 0x00 (......00b)
scan_add: 0x01 (.......1b)
unknown4: 0x03 (......11b)
mute_mode: 0x00 (......00b)
iswide: 0x01 (.......1b)
padding: 0x0000
} memory (16 bytes at 0x09A0)

struct {
rxfreq: 0x00DF9260
txfreq: 0x00DF9260
rxtone: 0x0000
txtone: 0x0000
unknown1: 0x00 (...00000b)
power: 0x00 (.......0b)
unknown2: 0x00 (......00b)
unknown3: 0x00 (......00b)
scan_add: 0x01 (.......1b)
unknown4: 0x03 (......11b)
mute_mode: 0x00 (......00b)
iswide: 0x01 (.......1b)
padding: 0x0000
} memory (16 bytes at 0x09B0)

Actions #12

Updated by Srini Sankaran almost 10 years ago

Stephen Cavilia wrote:

[...]This seems to be mostly working, however I noticed a few issues trying to add new memory channels that were otherwise empty from chirp. Most settings are stored correctly except high/low power (always reads as L on channels that are are actually H) and some weird mute mode gets programmed on the new channels which can be cleared on the radio's menu (but it takes a couple extra button clicks to let you change it, it's as if the firmware is confused by an invalid value in memory at first and doesn't enter the menu correctly). Has anyone else noticed this? My radio has V1.05 "Sain Sonic" firmware dated 20141013.[...]

Yes, I have noticed the odd mute mode issue as well. The "T" icon to the left of the bandwidth "N/W" icon lights up, which according to Page 06 of Wouxun manual is "QT Mute Mode". Not quite sure what that means, but I get no audio unless I turn it off by going to menu 31 (SP-MUTE) and set it to QT. Yes, I also see the same behavior you see at first when entering menu 31. The firmware doesn't display any value, but you can change the value with the arrow keys.

My radio is v1.03 dated 20140617. I bought the radio less than a month ago at my local Ham Radio Outlet store.

Actions #13

Updated by Srini Sankaran almost 10 years ago

After writing to the radio with Chirp on my Mac and reading the radio back with the Wouxun supplied software on Windows, I see that every channel is set to "QT*DTMF" for mute mode. Changing that to "QT" on the Wouxun software and writing it all back to the radio fixed the mute problem. So I guess whatever Chirp is writing to the radio is making all these channels QT*DTMF mode.

Regarding the Narrow vs Wide band issue, I think Chirp sets the exact opposite of what I specify. My narrow channels get set as wide and vice versa.

Actions #14

Updated by Ron Wellsted almost 10 years ago

Code corrected for Power setting (I made a mistake in interpreting the memory structure!) and have forced the mute mode to QT instead of allowing a random value (which seemed to always be QT*DTMF).

Actions #15

Updated by Srini Sankaran almost 10 years ago

Ron Wellsted wrote:

Code corrected for Power setting (I made a mistake in interpreting the memory structure!) and have forced the mute mode to QT instead of allowing a random value (which seemed to always be QT*DTMF).

Thanks. I think the mute mode works ok now (daily-20141202)
But it seems that power is always set to H irrespective of whether I set L or H.

Actions #16

Updated by Ron Wellsted over 8 years ago

  • % Done changed from 20 to 80

Support is now mostly complete.

Items not yet implemented are:
CTCSS/DCS on VFOs
Scan groups
Call settings

Actions #17

Updated by Bernhard Hailer over 4 years ago

  • Status changed from In Progress to Closed
  • % Done changed from 80 to 100
  • Chirp Version changed from 0.4.0 to daily

This appears to be complete.

Actions

Also available in: Atom PDF