Closed rct closed 8 years ago
The easiest place to patch seems to be the Firmware Ver.
string at 0x080d14d8
or the Radio Info
string at 0x080d1d68
.
Either can be seen in Menu/Utilities/RadioInfo/Versions, but "Radio Info" is used in menu different locations, so it is less appropriate to patch.
tmg% rabin2 -zz flash.img | grep Firmwa
vaddr=0x000c54d8 paddr=0x000c54d8 ordinal=15768 sz=28 len=13 section=unknown type=wide string=Firmware Ver.
tmg%
Patch the firmware version string (bytes?) that gets display from the Radio Info menu to differentiate from stock unmodified firmware. A one byte difference might help avoid some confusion.
Note Radios that are configured to display text lines on start up from the codeplug won't show the PoC || GTFO logo from the patched firmware.