AnyTone at-D578UV Mods and Information
AnyTone at-D578UV Mods and Information
AnyTone at-D578UV Mods and Information
Updates made since the previous version are shown in this purple colour
This information is primarily intended for amateur ’ham’ radio operators who wish to maintain and adjust their AT-D578UV. Any regulatory authority
approval (e.g. FCC certification) may become invalid by the use of this information. Users should always ensure that they and their radios are operating in
accordance with their licence conditions. Many of these mods may also invalidate any manufacturer warranty you may have. In any case, the user alone accepts
all responsibility and risk from the use of this information and tools provided here.
members.optuszoo.com.au/jason.reilly1/578mods.htm#Inside 1/35
15/02/2021 AnyTone AT-D578UV mods and information
Page index:
Introduction
Hints & tips for upgrading firmware New: procedure when something goes wrong with firmware upgrade
Strange error messages --- Band Error has it’s own section, click here
A website with lots of great hints & tips for the AnyTone DMR radio family
Compatibility of encryption
Microphone socket pinouts & information, including use of a base microphone for your 578, with schematic
Modify the 578 microphone for external audio input and output for SignaLink etc.
Using a Bluetooth module for external audio input and output for digital modes etc.
Make your radio sound like a Motorola, or play with some other fun tone sequences
Known button held during power up sequences update: new sequence found
members.optuszoo.com.au/jason.reilly1/578mods.htm#Inside 2/35
15/02/2021 AnyTone AT-D578UV mods and information
Preventing your 578 from freezing / locking up and how to cure many problems
Introduction:
AnyTone’s AT-D578UV is a superb dual or tri band DMR & FM mobile radio. Anyone familiar with the AnyTone handheld 878 DMR handheld will instantly be at home
using this radio. But the 578 is more than just an 878 crammed into a mobile radio case. Rated for 60 watt output on VHF and 45 watts on UHF, 4000 channels, 200,000
digital contacts, true simultaneous dual receive including dual same band RX, the 578 has been eagerly anticipated, and well worth the wait.
Presented here is a collection of modifications & technical information for the 578. Not all of these modifications are my own ideas, and credit has been given to the
original author of the information as best as I have been able to find. Each modification is rated on a difficulty scale as follows:
Easy: no specialist skills required, easy soldering, minimal disassembly. If the thought of picking up a screwdriver makes you break out in a cold sweat, however, you
might want to seek some assistance
Moderate: some skill required in soldering, electronics and/or computing, some disassembly needed. Any self respecting ham / electronics geek will be comfortable at this
level.
Advanced: excellent soldering skills required, very good knowledge of electronics and/or computing, extensive disassembly.
If you have any more information or modifications that you’d like to share here, please contact me at vk7zja at gmail dot com and I will make
sure you receive credit for your work, though you are welcome to remain anonymous if you wish.
Method 1: changing the band of the radio to match the codeplug file you are trying to write (easiest method)
1. Ensure that you do not have any power on password active. If you do, you must use the CPS software to remove it first.
2. Download Colin G4EML AT Options version 6 (17kb) software from:
Download from this webpage here
Download via Mega
members.optuszoo.com.au/jason.reilly1/578mods.htm#Inside 3/35
15/02/2021 AnyTone AT-D578UV mods and information
Download via Google Drive
Download via Sabercat host
3. Determine what band the codeplug is. Without the radio connected to the computer, open the codeplug .rdt file into the CPS software, and use menu Model then
Model Information to display information about the codeplug. In the middle of the window will be ’Frequencys’ and next to that will be Mode with a number. This
is your band number, write it down. Click on Cancel for now.
4. Connect your radio to the computer with the programming cable now, and open AT Options software. Select your usual Com port and click Read.
5. Next to Frequency, use the pull down list to select the band that matches the Mode number you wrote down earlier in step 2
6. Click Write to change the radio band
7. Back in the CPS programming software, you should now be able to write the codeplug .rdt file to the radio without a Band Error
Method 2: changing the band of the codeplug to match the radio (requires hex editing skills)
1. Determine what band the radio is set to. Connect the radio to the computer with the programming cable and with the CPS programming software, read from the
radio.
2. In the CPS programming software use menu Model then Model Information to display information about what was read from the radio. In the middle of the window
will be ’Frequencys’ and next to that will be Mode with a number. This is your band number, write it down. Click on Cancel for now and close down the CPS
programming software.
3. Convert the band number you wrote down into hexadecimal. As an example, if it is Mode 00015, 15=0F in hexadecimal. Write that down too.
4. Now open your codeplug .rdt file in a hex editor, and look at the byte at address (hex) 0x0011. This is the byte that tells the CPS software what ’band’ the codeplug
is. Change the value of the byte at address 0x0011 to the hex number you just calculated in step 3. Save the edited .rdt file under a new name.
5. Start up the CPS programming software, load the edited .rdt file that you saved with a new name and send it to the radio.
The red circle indicates byte 0x0011, which determines what band the codeplug is, change that data to 0E for band 14, or change it to 12 for band 18. Also note
how the offset (address) shown in HxD indicates where your cursor is placed.
Frank, KB2MXV, has made a nice YouTube video on the process of hex-editing your band byte. He’s using a different hex editor, so it will look a little different to
the above picture, but the general process is the same. Take a look at: https://youtu.be/atMWu00_33U
Method 3: when all else fails, use this export all / import all method (most reliable method, but needs the most work)
Method 4: change radio bands to match codeplug via radio Test Mode menus (if enabled)
1. Turn off the radio, then while holding down P4 key & pushing in the dial knob, power up the radio. Keep holding them until you see ’TEST MODE’ on the screen,
and release the keys. If this is not displayed, then this method will not work for you.
2. After the radio has fully powered up, you should see MODE:000xx on the screen. If you don’t, use the up/down buttons until you do.
3. Then rotate the dial knob to set a new MODE value to match the codeplug you are trying to send to the radio, and simply turn off the radio to set that value.
4. After turning the radio back on normally, you should now be able to write your codeplug to the radio
What are the differences between the AnyTone AT-D578UV mobile and AT-D878UV handheld?
From a features viewpoint, the D578 has some extra functionality over and above the D878, such as:
True 220 MHz operation, for the AT-D578UV PRO III. The 878 can only really be used for RX only in this part of the band.
members.optuszoo.com.au/jason.reilly1/578mods.htm#Inside 4/35
15/02/2021 AnyTone AT-D578UV mods and information
True simultaneous dual receive, even in the same band. While the 878 can display two VFOs, it’s receiver only toggles between the two quickly. The 578 has two
independent receivers so you can receive two FM signals at the same time. (However, only one DMR signal can be received at a time)
Obviously, higher RF output power, 60 watts on VHF and 45 watts on UHF
Analogue inversion scrambling is featured on the 578
Crossband repeater function, analog to analog, analog to DMR or DMR to DMR
The 578 uses an external GPS antenna, which is is included if you purchase a GPS equipped model of the 578
The 578 has more internal memory installed, so more complex features and larger digital contact list will be possible in the future
1. Under the original firmware, before you do any upgrades, export everything (Tool > Export > Export All)
2. Go through all your Optional Setting and write them down or take screen shots of all the settings there. If you are using encryption, also record all your encryption
keys. These settings and encryption keys are not saved by the Export All process.
3. Power up the radio normally, then hold down the MENU and EXIT keys and power off the radio. Ensure the LED is flashing red, indicating firmware upload mode
is active. Upload the new firmware using the CPS software menu Tool > Firmware and Icon Update
4. RESET the radio - this step is very important! If you do not do this, the old data in the radio could conflict with the way the firmware expects the memory to be
formatted after upgrading.
5. If there is a baseband update with the new firmware release, do this now. Power up the radio holding the top orange / blue button and the # button until the message
"This is Boot Mode for SCT!!!" is displayed. Use a freshly installed version of the SCT_PORT Host Controller software on your PC to send the new SCT3258 hex
file to the radio. Older versions of the SCT_PORT Host Controller software may not be able to load all the required information, despite giving no error or other
failure indication
6. If there is an icon update with the new firmware release, do this now. Power up the radio holding the PTT and the lower side button until the message "UPDATE
MODE" is displayed. Upload the new icon file using the CPS software menu Tool > Firmware and Icon Update
7. Install new version CPS
8. Go to Tools > Options and tick the GPS / Bluetooth / 500 Hours record / APRS options that apply to your radio.
9. Now read from the freshly reset radio (yes, you are reading a ’blank’ radio, that is OK)
10. Import everything saved from step 1
11. Finish off your codeplug by attending to the Optional Setting & encryption keys if applicable and confirm all is correct
12. Send the freshly rebuilt codeplug to the radio
13. If you had a custom start up picture or background pictures, send those to the radio now
14. Finally, save the codeplug and ensure you use this saved file as the basis for any further changes you may make
Yes, the thing will work with last firmware version’s codeplug, but strange things can & do happen. Laggy transmit, distorted alert tones, freezing, lockups and other
miscellaneous issues have all been fixed by a fresh codeplug rebuild - a process made a lot easier with the export & import features of the software. This ensures the
underlying data that your codeplug is built upon is fresh and consistent with the CPS and firmware version in use. Take the time to do this to ensure the best result.
If something goes wrong with the firmware update process, like a power failure in the middle of writing or the USB cable gets knocked, and corrupts the update to the
point where the 578 won’t turn on or reset any more, follow this process that Sergey UA3ARF passed along:
1. Remove power from the 578 by unplugging it’s power cord, or turn off your power supply. Wait for a minute to allow things to settle
2. You will need to get the help of a second person here: Hold down the POWER, MENU and EXIT buttons. While holding in those buttons, reconnect power (or turn
on your power supply) and then first release just the MENU and EXIT buttons, and then release the POWER button quickly after
3. If you’ve done this right, the front panel LED will be flashing red, indicating the 578 is ready to accept a firmware update. Carefully redo the firmware update
again.
If you have troubles with what Windows installs by default, create a Windows restore point first (just to be safe) and then download and update to the latest GD32
drivers here: http://www.connectsystems.com/products/top/radios/DS878UV_SOFTWARE/GD_VirtualComDriver%20v2.0.2.4944.zip (921kb) then select the x64
members.optuszoo.com.au/jason.reilly1/578mods.htm#Inside 5/35
15/02/2021 AnyTone AT-D578UV mods and information
folder for 64 bit Windows, or x86 for 32 bit Windows operating systems
Win 7: when Windows starts, hold F8 to get into the ’advanced boot options’ and select ’Disable Driver Signature Enforcement: Loads installed software that has
invalid or missing signatures.’
Win 10: Press and hold the shift key on your keyboard and click the Restart button. Select Troubleshoot > Advanced options > Startup Settings and then click the
Restart button. When your computer restarts, you’ll see a list of options, press F7 to select Disable driver signature enforcement. Once the computer restarts, go and
install the AnyTone driver.
Out of date or invalid usbser.sys system file in c:\windows\system32\drivers folder can also cause problems. Find a new version 6.1.7601.17xxx of usbser.sys, and
manually copy it into your system32 drivers folder after booting into MS DOS mode, and restart the computer.
Some computer’s USB controllers can have trouble detecting the USB connection to the 578 if the radio is connected via it’s programming cable while turned off,
then turned on after the cable is connected. If you find you have this problem, try plugging in the USB cable into the PC while your radio is powered up. Normally
that’s a big no-no, as you can induce spurious transitions on the USB data lines which can lead to strange things happening. In this case it can result in a successful
connection! The working theory is that it is some PC USB controllers might be too impatient waiting for the radio’s USB to respond while it is busy booting up, but
if it’s already powered up the radio MCU responds quick enough to keep finicky PC USB controllers happy.
Band Error has it’s own section, click here to see four different methods on how to
fix this problem.
If you see something similar to this error message, it means you are trying to load a newer codeplug file than what your CPS software
version can handle.
If you are getting this cryptic error message when trying to read or write to
your radio, it means that your PC programming (CPS) software isn’t the
same version firmware as what is on your radio. Always make sure you are
using matched versions of CPS and firmware.
This error means your codeplug has become corrupt in memory. All you need do is perform a reset on the radio and reload the
codeplug.
This error is a little more serious. A similar error message is ’Bad Block.’ Try the following, in order:
members.optuszoo.com.au/jason.reilly1/578mods.htm#Inside 6/35
15/02/2021 AnyTone AT-D578UV mods and information
Alternatively, you can use the defroster packs toward the bottom of this page to refresh your flash memory, though you will
still need to have a backup of your critical area data first.
4. In the very worst case, this could indicate hardware failure of the flash memory, a fatal problem that can not be recovered
from
This error, or ’RTC ERROR!’ or ’RTC not run!’ means that, for what ever reason, the radio can not read the Real Time Clock.
There is a pair of tiny internal batteries that backs up the Real Time Clock and keeps time when the radio is turned off. If
either battery becomes too old, or goes faulty, you may see this error. If you continue to ignore this error message and the
battery becomes so bad that it short circuits itself, then that could start to induce other new random errors such as the radio
freezing up, not accepting any codeplug or firmware updates, and finally becoming completely unresponsive. A short circuit
battery will drag down the microprocessor voltage supply, causing these random failures. The RTC backup battery can be
replaced by getting access to the bottom side of the PCB and desoldering the old battery and replacing it with a new MS412 3
volt lithium battery - just make sure you get a MS412 already fitted with solder tabs. After fitting, a reset of the radio, setting
the time & date and reprogramming the codeplug should set everything right.
Not really an error message as such, if you are seeing white blocks being displayed instead of an icon after you have made a
firmware update, this means you need to also need to do an icon update to the radio. So far, the 578 has not had an icon update
issued, but if you still find white squares appearing on the 578, you can use the latest 878 Icon file (it's the same as what is used
in the 578): find Icon V1.20 update as part of the 878 V1.11 firmware update package. Once you have downloaded the package
and located the Icon Update folder within, you send the icon .spi file to the radio by powering up the 578 in the icon update
mode by holding down the DIAL and P1 buttons until UPDATE MODE is displayed. Then use the CPS menu selections Tool >
Firmware and Icon Update and select the icon .spi file
Download the 878 icons package which uses the same icon file as the 578 (987kb) here:
Download via Mega
Download via Google Drive
Download via Sabercat host
A website with lots of great hints & tips for the AnyTone DMR radio family
(Thanks to Norman M6NBP and lots of others who contributed)
If you can’t find the answer you are looking for here, then this website is a real goldmine of information. It is the accumulation of many user’s experiences, hints and tips
for all of the AnyTone DMR radio family. Take a look at: http://hamradio.joomla.com/anytone-dmr.html
members.optuszoo.com.au/jason.reilly1/578mods.htm#Inside 7/35
15/02/2021 AnyTone AT-D578UV mods and information
Also make sure your digital call hold times are set to 5 seconds or more:
members.optuszoo.com.au/jason.reilly1/578mods.htm#Inside 8/35
15/02/2021 AnyTone AT-D578UV mods and information
seconds you will see on the display ’Are you sure you want to Initialize radio?’. If you are sure you want to carry out the reset, press the MENU key and the radio will be
reset, or press EXIT key to abort and not reset the radio.
Compatibility of encryption
Starting at firmware version 1.03, there are two voice encryption types available on the 578.
First is AES (Advanced Encryption Standard) which is definitely compatible with Motorola and Hytera products that also have AES enabled. To set this sort of encryption
and have it successfully communicate to another AES encrypted radio you need to:
Ensure the radio is updated with baseband version SCT3258 V2.01.07BA; AES was not available on earlier versions
Go to Options > Other > Encryption Type set to AES
Program in the encryption keys under menu ’AES Encryption Code’ using the same key ID index (Encryption ID) and key value as other radios programmed with
AES encryption
If the key value has less than 64 hex characters, you need to pad out the key with leading zeros
Finally, in each channel you want to encrypt, select the required key ID index number in the ’AES Digital Encryption’ setting for those channels.
Note that SMS messages are not encrypted, so be aware of this.
The other encryption type is called ’Common’. This encryption system is set up slightly differently:
You can only select one type of encryption in the 578 at a time: either AES or Common (Normal or Enhanced), not both at the same time. Also, encryption obviously only
works on DMR digital channels.
Regarding compatibility, as already mentioned, AnyTone AES encryption is compatible with Motorola & Hytera AES encryption.
With the ’Common’ encryption - either in standard or enhanced mode - this is only compatible with other AnyTone 578 and 878s with the same settings. It is not
compatible with other Chinese brand radios encryption, and it is not compatible with Motorola Basic Privacy or RC4 Enhanced Privacy.
The AnyTone radios will never be able to be compatible with Motorola Basic Privacy because that is a proprietary system that Motorola would not permit others to copy;
and will never be compatible with RC4 Enhanced Privacy because the SCT3258 is physically unable to process DMR in the same way necessary to enable that particular
encryption system.
There might also be the possibility of a genuine remote head / display mount option. There is only the one flat ribbon cable connecting the display unit to the radio main
body (the little coax cable connects to the GPS SMA connector; this could be replaced with a GPS antenna in the display unit as it has provision for it See: Add an
internal GPS antenna to the 578), and if someone were able to source an equivalent 40 pin ribbon cable of a few feet in length and 3D print some backing plates to
securely mount the display unit... who knows? It may be possible.
members.optuszoo.com.au/jason.reilly1/578mods.htm#Inside 9/35
15/02/2021 AnyTone AT-D578UV mods and information
Another product that Greg has will be of particular interest to 578 owners. If you have trouble remembering what all the programmed functions go with what button, this
is going to be perfect for you. Now you can banish the hand scribbled sticky note you keep by the 578 to remind you of what button does what! Greg has a special web
page set up for this very professional sticker at: https://sites.google.com/view/kc8gl/anytone-578-p-button-cheat-sheet
members.optuszoo.com.au/jason.reilly1/578mods.htm#Inside 10/35
15/02/2021 AnyTone AT-D578UV mods and information
It is now possible to wire up a base microphone to the 578. PTT is enabled by connecting pin 1 & 8 on the microphone socket by a 2.2K ohm or 1.0K ohm resistor via
your PTT button. You also need to make the following setting in the CPS: HandOpMode set to Level Detection, as seen below here:
members.optuszoo.com.au/jason.reilly1/578mods.htm#Inside 11/35
15/02/2021 AnyTone AT-D578UV mods and information
Do not use a PTT resistor less than 1.0K ohm, as this could damage the radio.
Here is a general schematic for building or adapting a base microphone to the AnyTone 578. You could use a surplus computer gooseneck microphone and modify that for
this use.
R1 is 100 ohms.
R2 can vary from 22k ohms down to 1k ohms, depending on the individual electret microphone insert used. Start with 22k ohms and reduce the value until you reach the
microphone gain level desired. Too much gain will cause gross distortion and make your transmissions difficult and unpleasant to listen to.
R3 is 2.2k or 1.5k ohms.
C1 is 100pF and should be mounted directly on the back of the electret condenser microphone insert.
C2 can vary according to your personal preference. Use 10uF electrolytic for a stronger bass response, or 1uF electrolytic for normal use.
C3 is a 100nF (0.1uF) polyester or other similar bypass type capacitor.
C4 is a 1uF electrolytic capacitor.
V1 is an electret condenser microphone insert.
S1 is your PTT button.
Important: do not confuse microphone ground and logic ground in the diagram above. The two must be kept separate.
The above schematic could be adapted to using a dynamic microphone, but you will probably need to use a small amplifier in place of C2 to boost the very weak output of
the dynamic microphone element. Power it using the same decoupling circuit shown using R1, C3 & C4. R2 is not necessary for dynamic microphone element operation.
It is not possible to have both original AnyTone hand microphone and base microphone connected, or have some sort of switchable tee piece to be able to switch between
the two. You can’t even manually swap between the two types of microphone unless you change the CPS setting first - if you leave the setting in Level Detection with the
normal microphone connected, not only will the microphone or any of it’s buttons not work, but it will also randomly send the radio into transmit.
Modify the 578 microphone for external audio input and output for SignaLink etc. Moderate
With thanks to Tim N8NQH
For applications where you might want to connect external TX microphone audio and RX received audio to an external device, such as a SignaLink, TNC or RigBlaster
etc. then this modification from Tim N8NQH is perfect. Read all about it at this link: http://tim-yvonne.com/ham/dmr/how-to/signalink-to-d578.htm
members.optuszoo.com.au/jason.reilly1/578mods.htm#Inside 12/35
15/02/2021 AnyTone AT-D578UV mods and information
Using a Bluetooth module for external audio input and output for digital modes etc. Easy
With thanks to a ham who wished to remain anonymous
As an alternative to the above modification of the microphone for connection to a SignaLink, you can use some Bluetooth modules to get audio in and out of the 578, so
you can then use digital modes etc. But apparently, many cheap USB Bluetooth adapters are not very good for this purpose. After much experimentation, one ham hit
upon a nice little $12 Bluetooth module that works a treat. The TinySine Bluetooth adapter converts the Bluetooth connection to a standard pair of 3.5mm audio sockets,
one for microphone in, the other for line out. Those are then connected to your PC with standard 3.5mm audio patch cables. It’s powered by a micro USB socket, but this
doesn’t form the link to your PC, it is only used to power the TinySine. Easy!
There are a couple settings on the radio which you may want to change as well. Under the Bluetooth menu of the radio, there is a ’BT + int mic’ option: if turned on, you
are able to use both the hand mic to talk, and the computer to send audio to the 578. There is also a ’BT + int spk’ option: you can decide if you would like to have audio
come out of both the radio speaker, and out via Bluetooth going to the computer.
To send the radio into transmit, you must use AnyTone’s little Bluetooth PTT button. Another option is to set the HandOpMode to Level Detection (see above information
on microphones ) and use whatever digital mode you are using control PTT, but you will then lose the ability to use the microphone as it must be unplugged for this option
to work.
See more information about the TinySine here: https://www.tinyosshop.com/index.php?route=product/product&path=158_168&product_id=973
Chris 2E0UKH has made a video preview of these backgrounds and shows you how to upload them to the 878 - the process is practically identical for the 578 too. Take a
peek at his YouTube video here: https://youtu.be/tPMhNEPVgjw
What these settings do is to subtly change your voice characteristics when transmitting on DMR.
Experiment with these settings to find the best setting for your situation. At the moment, the Indoor and Outdoor settings are only available from the radio menus, not
within the CPS software.
Shown here is the transmitted audio response plots using a test audio clip transmitted using DMR:
members.optuszoo.com.au/jason.reilly1/578mods.htm#Inside 13/35
15/02/2021 AnyTone AT-D578UV mods and information
From Steve WA7PTM comes a fun tone sequence to try. You can use this for the Call Tone, Idle Channel Tone or Call Reset Tone, completely your choice.
1st tone = 1175 Hz for 200ms
2nd tone = 1319 Hz for 200ms
3rd tone = 1047 Hz for 200ms
4th tone = 523 Hz for 200ms
5th tone = 784 Hz for 200ms
Now you’ll hear the famous melody from Close Encounters of the Third Kind movie.
Or how about the melody Manah Manah made famous by The Muppets?
members.optuszoo.com.au/jason.reilly1/578mods.htm#Inside 14/35
15/02/2021 AnyTone AT-D578UV mods and information
1st tone = 1397 Hz for 150ms
2nd tone = 1760 Hz for 150ms
3rd tone = 1976 Hz for 50ms
4th tone = 1568 Hz for 50ms
5th tone = 1318 Hz for 50ms
1. First, in the CPS, go to Analog > Analog Address Book and add in each node you might want to be able to quickly recall / dial. The node number goes in the
Number column, and the node name / callsign goes under the Name column. This name is what you will see on the radio screen, so it can be given any name that is
meaningful to you.
2. Then, in Analog > DTMF Setting, set the following:
It is recommended to switch off the side tone, as otherwise you will hear the DTMF tone while transmitting, with full audio level (which could be annoyingly loud).
3. Next, in Optional Settings > Other, set your Address Book Is Sent With Its Own Code to off.
4. The final step is to go in to each channel that is programmed that you will use to connect to your local EchoLink node, and ensure that Optional Signal is set to
DTMF.
In use, to connect to an EchoLink node, select the frequency / channel of a nearby FM-Echo-Link Node (-L) or -Repeater (-L). Then press List (red button) and select the
entry, you intend to call. With the desired entry highlighted, just press and hold PTT while the sequence of DTMF is transmitted.
Please note, that only DTMF-numbers can be stored in the analog address book. Any other characters (ABCD*#) required to control a link, must be entered manually by
the keypad.
Press MENU and EXIT keys together just after power OFF for main firmware update mode (red LED blinks)
P1 and dial held down on power up enters a display icon update mode
P2 and dial held down on power up enters the reset menu
P3 and dial held down on power up enters a GPS module test mode
P4 and dial held down on power up enters the TEST MODE where you can select operational bands ("modes") and/or adjust alignment parameters, but only if this
has been first enabled by AT Options software
P5 and dial held down on power up enters test mode with BHT (Bluetooth) turned on
P6 and dial held down on power up enters an update mode for LinkBoard (Bluetooth)
MENU and dial held down on power up enters the DSP SCT update mode
EXIT and dial held down on power up enters a GPS signal strength (RSSI) test mode
members.optuszoo.com.au/jason.reilly1/578mods.htm#Inside 15/35
15/02/2021 AnyTone AT-D578UV mods and information
1. Normally, test mode will be completely inhibited as delivered by the factory
2. With ’band select’ test mode, you will only be able to select MODE to change operational frequency bands of the radio
3. In full unlocked test mode, some degree of calibration / alignment is possible from the front panel of the radio for deviation levels, power output levels, received
signal strength indication (RSSI) levels, squelch levels, frequency fine setting and more.
See the section below titled Enabling full test / self adjustment mode for more detail.
Note that whenever you do change MODE, the radio will reset and you will lose your programmed data. Make sure you have a saved copy of your codeplug. Each saved
codeplug will have the MODE it was created under encoded within it. If you try to reload the same codeplug after changing MODE, the CPS software will reject it, saying
that it is the wrong band. To fix this, you will need to ’hex edit’ the codeplug rdt file: change byte 0x0011 to match the MODE selected. For example, if you set
MODE=00002 then edit your codeplug byte 0x0011 to be hex value 02. Or if you set MODE=00010 then set codeplug byte 0x0011 to hex value 0A.
Begin by turning the radio off, then press and hold the P4 and dial buttons down while turning on the radio, hold those two buttons until you see ’TEST MODE’ appear on
screen. After releasing the buttons the radio will start up with the text ’MODE:00000’ to the bottom of the screen
If you don’t see this screen, you will need to download AT Options software and enable ’Band select’ check box & write this back to the radio. See: Download AT Options
software
Rotate the top dial to change the mode number, which will select the following:
1 400-480 & 136-174 (12.5k only) 400-480 & 136-174 (12.5k only)
14* 400-520 & 136-174 & 220-225 400-520 & 136-174 & 220-225
18 400-480 & 136-174 & 220-225 420-450 & 144-148 & 222-225
* MODE 14 is not directly selectable, you first need to enter a password to enable this band. When MODE and the band number is displayed, press any number on the
keypad and the radio will ask "INPUT PASSWORD:" if you happen to know what this password is, enter it, and then you should be able to select MODE 00014. Then
turn off the radio, which will save your selected mode setting, and from that point on, your radio will use the frequency limits that correspond with the mode setting you
selected. You can repeat the process to change MODES at any time.
The bands that are indicated in grey above are not directly selectable via the test menu MODE selection. You can use AT Options application to select one of these hidden
bands if you require.
I will not be sharing the password for MODE 00014 under any circumstances, as the FCC is starting to closely scrutinise these matters and we don’t them to revoke
the approval status for these wonderful radios, which would result in the AnyTone radios being withdrawn from sale, then nobody would be able to enjoy them.
For the vast majority of users, there is no need to use MODE 00014 anyway. The alternate firmware files available at expanded RX frequencies with alternate firmware
will permit out of band reception under any MODE selection, making MODE 00014 mostly redundant. If you have a genuine requirement for MODE 00014, then please
see your dealer.
members.optuszoo.com.au/jason.reilly1/578mods.htm#Inside 16/35
15/02/2021 AnyTone AT-D578UV mods and information
Download the frequency expanded / modified 578 firmware package (1.1 Mb) based on v1.11 firmware from:
Download via Mega
Download via Google Drive
Download via Sabercat host
Your mileage may vary of course, due to individual radio & component manufacturing tolerances. You can use the VFO and add memory channels to use these new
expanded receive frequency ranges. Note that with the expanded frequencies, you can’t enter frequencies via keypad direct entry that start with a 3 or 5 (e.g. any
frequency in the 300 or 500 MHz range) the only way to get to them is via lots of knob twisting in VFO mode.
To enter out of band frequencies in the CPS programming software, you will need to use the export-edit-import method: program some dummy channels with valid but
easy to recognise frequencies, for example 456 MHz, then use the export feature (tool > export > channel > give it a name > export) and save your exported channels.
Open the exported channels file with a text editor - look for your dummy channels you had previously entered, and edit the frequencies as you require, and save the file.
Back in the CPS software, use the import feature (tool > import > channel > find your edited csv file > import) to bring the channels with out of band edited frequencies
into the radio.
Transmit remains standard according to each MODE. Note that out of band receive frequencies can be very low in sensitivity due to the excellent front end filtering of
these radios.
members.optuszoo.com.au/jason.reilly1/578mods.htm#Inside 17/35
15/02/2021 AnyTone AT-D578UV mods and information
members.optuszoo.com.au/jason.reilly1/578mods.htm#Inside 18/35
15/02/2021 AnyTone AT-D578UV mods and information
These measurements were all made in Narrowband FM mode. Wideband FM results are 4dB higher. DMR sensitivity is listed as being -117.4dBm for BER 5%
and -110dBm for BER 1%
Summary: 0.18uV VHF // 0.28uV 220 MHz // 0.20uV UHF for 10dBQ (approximates 12dB SINAD) Narrowband FM.
If you are wondering about the sensitivity measurements that are off scale of the above graphs, here are those results for 10dBQ:
110MHz= -34dBm; 115MHz= -22dBm; 120MHz= -49dBm
270MHz= -58dBm; 280MHz= -44dBm; 340MHz= -46dBm; 350MHz= -49dBm; 360MHz= -52dBm; 370MHz= -56dBm; 380MHz= -59dBm; 390MHz= -67dBm
While these power measurements were taken in analogue FM mode, they will be accurate for DMR as well. Note carefully that unless you have special power measuring
test equipment, able to read peak pulse power with a duty cycle correction factor of 0.4615, then your simple power meter will not be able to correctly measure power
output in DMR transmit, it will read much lower than the actual figure.
members.optuszoo.com.au/jason.reilly1/578mods.htm#Inside 19/35
15/02/2021 AnyTone AT-D578UV mods and information
upset the receiver and mimic this effect. In those instances, a change of antenna or location may help.
Once you find the location of the font you want to play with, make a note of its starting location. Now you’ll want to create a font of the same size. A very useful tool to
convert fonts from your computer into bitmaps is Rays Font Editor which you can download here:
http://www.rayslogic.com/Software/RaysFontEditor/RaysFontEditor_24Aug12.zip (3.0 Mb)
Make sure you convert the font to the same size as the one you are going to replace. To use Rays Font Editor to produce a bitmap ready for the 578:
Once you have a binary image of your desired font, you might want to use Colin’s ImageTest application to examine the fonts and confirm how they’ll appear on the radio
screen.
Now it is simply a case of using your hex editor to copy this binary data from the file you just created over the top of the font data in the firmware file, at the start address
you noted earlier. If using HxD, use paste write, not paste insert when copying your new font binary data into the firmware image. Write the firmware to your 578 and
enjoy a new look display.
Multi-coloured icons, other than the basic mono-chromatic symbols, are mostly stored in the 578 flash memory locations 0x0015A000 to 0x00200000. The 578 currently
uses the same icons as the latest 878, and so you can use the 878 Icon V1.20 update as part of the 878 V1.11 firmware update package to write to those memory locations.
As a result, if you want to play with custom icons, it is easiest to edit a copy of the 878 icon file called D878_1G_ICON_V1.20_20190226.CDD if you want to customise
some of your coloured icons. They are encoded as RGB565 raw bitmap format, and of varying sizes. You could use a raw bitmap viewer to explore the contents of the
icon update file. A good website to do this is located at: http://rawpixels.net/
For full screen bitmaps such as the start up image, select a width of 128 pixels, height of 160 pixels, select Flip V, select Predefined format of RGB565, and make sure
Little Endian is not selected. For other icons you will need to play around with the width and height, but should use the same settings.
A few other coloured icons are encoded into the firmware image, the main one there being the 11x11 digital monitor speaker symbol.
Warning: you can seriously mess up your radio with this adjustment mode to the point that it may not transmit, receive, or even have a visible display with
careless changes to certain values. If you do not know what you are doing, leave this alone.
There is a way to enable the full test mode menu on the radio so you can not only alter the operational bands, but also things like setting Turbo, High, Mid & Low RF
output power levels individually, fine tune the frequency, set the tight squelch values, change the received signal strength S-meter (RSSI) meter curve, even calibrate the
battery voltage readout.
Begin by connecting your radio to the CPS software and take a screenshot of, or write down the information shown in the ’Local Information’ screen. This is very handy
information to keep. Also ensure you have saved a copy of your current codeplug
members.optuszoo.com.au/jason.reilly1/578mods.htm#Inside 20/35
15/02/2021 AnyTone AT-D578UV mods and information
Colin G4EML has created an application called AT Options, which will allow you to enable the full test mode, enable a programming password (more about this below)
and to edit other text such as the dealer you purchased your radio from, or any maintenance notes you might like to add. For example, you can enter your name, phone
number and callsign in this text area in case your radio is stolen.
Download Colin G4EML AT Options version 6 (17kb) software from:
Download from this webpage here
Download via Mega
Download via Google Drive
Download via Sabercat host
*As always, this software is provided without any warranties, and you use it entirely at your own risk. Using this application to write any changes to your radio is also
likely invalidate the manufacturer’s warranty
(The application is also suitable for the AnyTone 878 & 868, Btech 6X2 and Alinco DJ-MD5)
Ensure that you do not have any power on password active. If you do, you must use the CPS software to remove it first. Use of AT Options while a power on password is
active can, under certain circumstances, cause some data to be overwritten with default data.
When you run the software, select your COM port and READ from the radio. Then edit any text fields you may want, and make sure Band Select and Full Test Mode
check boxes are ticked. Finally, WRITE the settings back to the radio - this only takes a fraction of a second to do, and the radio will reboot. It may take a few extra
seconds more than normal to boot up, this is OK as it is reconfiguring internal memory.
To activate test mode, turn off the radio, hold down the P4 and dial buttons while turning on the radio until TEST MODE is displayed on the radio screen (this takes a few
seconds to happen), then let the two buttons go. The radio will boot up into it’s full test / self adjustment mode.
Once you start test mode, scroll up and down between different test adjustment points using the zone up/down button. The following adjustments are available:
I strongly recommend you go through each setting and write down what they are before making any adjustments
578 Adj. range Description Typical
Setting value
21 TONEU 0-255 Transmit audio tone level, push PTT to transmit a test 1000 Hz tone on displayed UHF FM frequency 98
22 TONEV2 0-255 Transmit audio tone level, push PTT to transmit a test 1000 Hz tone on displayed VHF FM frequency 40
23 CTCW 0-128 Deviation setting for CTCSS in both UHF & VHF 39
24 DCSW 0-128 Deviation setting for DCS in both UHF & VHF 28
25 BPFLUA 0-255 UHF A-VFO receive tracking gain, low end of band 35
26 BPFMUA 0-255 UHF A-VFO receive tracking gain, mid band 135
27 BPFHUA 0-255 UHF A-VFO receive tracking gain, top end of band 253
members.optuszoo.com.au/jason.reilly1/578mods.htm#Inside 21/35
15/02/2021 AnyTone AT-D578UV mods and information
28 BPFLUB 0-255 UHF B-VFO receive tracking gain, low end of band 35
29 BPFMUB 0-255 UHF B-VFO receive tracking gain, mid band 145
30 BPFHUB 0-255 UHF B-VFO receive tracking gain, top end of band 253
31 AGCUA 0-255 UHF A-VFO AGC (suspect receiver gain related) 180
32 AGCUB 0-255 UHF B-VFO AGC (suspect receiver gain related) 170
35 RSSIUA nil, only displays current UHF RSSI A-VFO, inject RF at desired level for 1 bar reading, rotate dial to sample and lock in value 72
value
36 RSSIUB nil, only displays current UHF RSSI B-VFO, inject RF at desired level for 1 bar reading, rotate dial to sample and lock in value 75
value
41 D FSKLU nil Push PTT to send test FSK signal (heard as 2400 Hz on FM receiver) at low end of UHF band
42 D FSKMU nil Push PTT to send test FSK signal (heard as 2400 Hz on FM receiver) at mid UHF band
43 D FSKHU nil Push PTT to send test FSK signal (heard as 2400 Hz on FM receiver) at high end of UHF band
44 D nil Push PTT to send test 600Hz signal UHF band (heard on FM as 200 & 400 Hz?)
600HzU
45 D nil Push PTT to send test 300Hz signal UHF band (heard on FM as 800 Hz?)
300HzU
46 D 1031U nil Push PTT to send 1031 test sequence UHF band, heard on DMR as 1031 Hz
48 D DIGI nil Test UHF DMR for both TX & RX as if it were on a regular DMR channel
56 BPFLVA 0-255 VHF A-VFO receive tracking gain, low end of band 3
57 BPFMVA 0-255 VHF A-VFO receive tracking gain, mid band 135
58 BPFHVA 0-255 VHF A-VFO receive tracking gain, top end of band 253
59 BPFLVB 0-255 VHF B-VFO receive tracking gain, low end of band 0
60 BPFMVB 0-255 VHF B-VFO receive tracking gain, mid band 135
61 BPFHVB 0-255 VHF B-VFO receive tracking gain, top end of band 253
62 AGCVA 0-255 VHF A-VFO AGC (suspect receiver gain related) 170
63 AGCVB 0-255 UHF B-VFO AGC (suspect receiver gain related) 170
members.optuszoo.com.au/jason.reilly1/578mods.htm#Inside 22/35
15/02/2021 AnyTone AT-D578UV mods and information
66 RSSIVA nil VHF RSSI A-VFO, inject RF at desired level for 1 bar reading, rotate dial to sample and lock in value 61
67 RSSIVB nil VHF RSSI B-VFO, inject RF at desired level for 1 bar reading, rotate dial to sample and lock in value 68
68 D FSKLV nil Push PTT to send test FSK signal (heard as 2400 Hz on FM receiver) at low end of VHF band
53 D FSKMV nil Push PTT to send test FSK signal (heard as 2400 Hz on FM receiver) at mid VHF band
70 D FSKHV nil Push PTT to send test FSK signal (heard as 2400 Hz on FM receiver) at high end of VHF band
71 D 600HzV nil Push PTT to send test 600Hz signal VHF band (heard on FM as 200 & 400 Hz?)
72 D 300HzV nil Push PTT to send test 300Hz signal VHF band (heard on FM as 800 Hz?)
73 D 1031V nil Push PTT to send 1031 test sequence on VHF band, heard on DMR as 1031 Hz
75 VBAT undetermined Calibrate displayed voltage. Do not adjust, otherwise radio will warn of incorrect voltage and prevent any further 109 *
adjustments
76 F1 A0 0-65535 Hex BCD combination of mic gain and mic AGC values, however adjusting has no effect 42512
The typical values listed above are unique to one radio, and should not be used to create a complete alignment profile. It is highly unlikely that your radio will work
properly using values from another radio, including these typical values. You need proper test & alignment equipment to be able to accurately set each value. As such, the
typical values given here are only to provide context for any adjustments you may wish to make. Critical values are marked with an asterisk.
For the squelch threshold values, a higher value gives a more sensitive squelch, but no improvement to sensitivity is obtained with values higher than about 112 to 114.
Lower values require progressively stronger signals to open the squelch.
The RSSI (received signal strength indicator - in other words the signal meter) has a fairly compressed range of 15dB. I’d have preferred to see at least 30dB range in the
signal meter, but I’ve found an acceptable compromise has been to set one bar at -113dBm which equates to values of RSSIU of 36 and RSSIV of 39. The signal meter
then reads:
Once finished changing your values, turn the radio off and on again to save them to memory. If you like, you can disable full test mode again by de-selecting the Full Test
Mode check box in AT Options application and writing back to the radio. Or, you can de-select both Full Test Mode and Band Select check boxes, which will totally
inhibit test mode completely. The values you changed or adjusted will not be erased by doing this, it simply prevents you from accessing the full test mode and
inadvertently changing them again. These values will not be overwritten, changed or restored to default by resetting of the radio. Once you change them, you can not get
the original value back unless you wrote it down before making adjustments.
You can download a more comprehensive memory map of how each individual adjustment setting is stored in memory, and see more hidden values that are obviously
used for RF alignment purposes, but are not available in this test mode. To experiment and adjust those you will need to use Flash Utility to create your own custom
binary image, and write your own custom CDI and SPI files to enable that data to be written to the radio (Flash Utility can’t write to that area of memory directly, it is
safest to write using the Icon update mode with a CDD, CDI & SPI file set).
Download the more comprehensive memory map (11 kb) from here:
Download from this webpage here
Download via Mega
Download via Google Drive
Download via Sabercat host
1. Do not connect your programming cable yet. Power up the radio and wait until it asks for the password
2. Only now should you connect your programming cable, and using the CPS software, read the radio
3. Go to the menu: Optional Setting > Power-on > Power-on Password Char and you will see your password. Record your password somewhere safe
4. Remove your programming cable, as you won’t be able to write back to the radio at this stage
5. Power cycle the radio and log in with the password you read in step 3 above
6. Using the radios own menus only, turn off the password check: Menu > Settings > Radio Set > Start Up Pwd > Off.
7. Power cycle the radio again and confirm you are not asked for a password this time
8. Now reconnect your programming cable, use the CPS software to read from the radio, and remove the power on password entirely
If your password has become corrupted in memory and the password read is anything other than pure digits, then your only option is to do a full defrost of the radio. A
quick defrost will not work.
members.optuszoo.com.au/jason.reilly1/578mods.htm#Inside 23/35
15/02/2021 AnyTone AT-D578UV mods and information
Programming password lock Easy
Apart from the power on password, there is also a hidden programming password that will require a four character password to be entered in the CPS software before it
will do any read or write operation. The password must be four characters, no more or less, and can be made up of any standard ASCII characters that can be typed on a
keyboard. To do this, use Colin’s AT Options application (download link in the Enabling Full Test / self adjustment mode section above) to enter a Program Password. To
disable any program password that may be present, just use the backspace button to delete the password and leave this field blank; then write back to the radio.
The back side of the display board. The GPS module ATGM336H is capable of tracking GPS & BDS (BeiDou) positioning systems. Also visible is the Bluetooth module.
Note the little cut out area and two mini coax connectors on the left bottom of the picture. One of the mini connectors is for the coax tail that goes to the GPS external
antenna SMA connector on the back of the radio. The other connector is unused. Obviously this is a provision to have a tiny built in GPS antenna to the display unit itself,
but AnyTone have decided against doing this in the end. A tiny 15x15x6mm active GPS antenna with a short coax tail terminating in a U.FL / IPX connector looks to be
ideal if you want to try adding your own, see adding your own internal GPS antenna
members.optuszoo.com.au/jason.reilly1/578mods.htm#Inside 24/35
15/02/2021 AnyTone AT-D578UV mods and information
members.optuszoo.com.au/jason.reilly1/578mods.htm#Inside 25/35
15/02/2021 AnyTone AT-D578UV mods and information
Close up of the twin 38 MHz IF crystal filters. Note the unpopulated PCB lands for a future version of the 578 that will have air band RX.
Notice how there is an unused position for a second crystal filter to be cascaded with the first... if you wanted even better selectivity, you could source a second pair of
38.550 and 38.850 MHz IF crystal filters, and install them after removing the little SMD 0 ohm resistor. But the 578 already has very good selectivity as it is already, so
this is not really necessary.
members.optuszoo.com.au/jason.reilly1/578mods.htm#Inside 26/35
15/02/2021 AnyTone AT-D578UV mods and information
Modifying the internal speaker for extra volume Advanced (extensive disassembly)
The internal speaker of the 578 can be made to be slightly louder. Testing shows a 2dB improvement in output volume, which isn’t a lot, but might make the difference if
you’re in a noisy environment.
The theory behind this modification is that with a solid backing plate behind the internal speaker cone, this increases the back-pressure on the cone as it vibrates back and
forth producing sound. If holes were to be drilled in this backing plate, air will be able to be more freely move out of the way of the speaker cone, restricting it less and
allowing it to move more freely, generating a higher output volume.
Begin by disassembling the radio - quite a lot of disassembly is necessary to get to the back of the speaker, including unsoldering the antenna connection. Once you have
free access to the speaker backing plate, remove it, mark out a series of holes evenly around the perimeter and mark them with a nail punch. To make the job of drilling
out 5mm holes easier, screw the plate to a piece of scrap timber. Once the holes have been drilled, de-burr them and reinstall the backing plate. Ensure the foam pad that
was originally between the back of the speaker and the backing plate is put back into place, and screw the backing plate down firmly, and finally reassemble the radio.
Key benefits:
Higher quality, better design connector, less ’junk’ connectors around in the N-type
Slightly lower loss, especially at UHF
Better VSWR / return loss; SO-239 connectors have an impedance ’bump’
Better weatherproofing than SO-239 / PL-259 types
Suitable diamond flange, two hole, N-type sockets can be purchased from: Mouser part number 523-172323 / RFparts part number 0-RFN1020-1 / many other suppliers if
you look
To replace the SO-239 socket with an N-type on the 578, first desolder the centre and earth pins of the socket as shown below. Then undo the screws holding in the socket,
and it should fall right out. Also remove the brass square U shape ground bracket, but replace the screws that held it in. Test fit your replacement N-type socket to make
sure it fits nicely. If all is good, solder a short bit of 1mm thick solid copper wire to the N-type socket centre pin, and bend it slightly upwards. Fit the new socket in the
radio chassis and refit the screws that hold the socket flange. Make sure the screws are done up quite snugly, but not so over-tight that you strip the threads. Lastly solder
the centre pin on to the PCB, clean up any flux that might be left behind and the job is done.
members.optuszoo.com.au/jason.reilly1/578mods.htm#Inside 27/35
15/02/2021 AnyTone AT-D578UV mods and information
Begin by removing the four Torx T8 size screws of the underside cover of the 578, and remove the two top side Torx T8 screws on the back lip of the display unit and
carefully separate the display unit from the main body of the radio. Don’t pull it out too far or you will damage the connecting ribbon cable. Then:
1. Unclip the existing u.FL connector that goes to the rear mounted SMA socket
2. Insulate the original u.FL connector and tuck it away somewhere; a little bit of 2mm or 3mm heatshrink is a professional way to do this, but some electrical tape is
OK too
3. Find some double sided tape (maximum of 1mm thick). The double sided foam tape pictured here is used in the automotive industry to affix exterior trim to vehicle
bodies etc. and works well
4. Add a small square of double sided tape to the top of the GPS antenna
5. Clip in the new antenna connector - due to it’s tiny size, this can be a bit tricky to get mated correctly, be patient and don’t force it. Mount the new antenna in the cut
out as shown below
members.optuszoo.com.au/jason.reilly1/578mods.htm#Inside 28/35
15/02/2021 AnyTone AT-D578UV mods and information
Reassemble the 578 and test to make sure everything is working OK. Remember you need to turn on GPS in the menu first!
So how well does it work? The below photograph illustrates just how well the new internal GPS antenna works. With a vehicle parked deep inside a large metal shed,
completely obstructing a view to the sky, the 578 and 868 were set side by side on the dashboard. After 5 minutes, only the 578 with the added GPS antenna has a position
fix. The larger size (roughly double) of the GPS antenna added in the 578 versus the smaller GPS antenna as fitted to the 868 accounts for this better sensitivity. All the
same, don’t expect miracles from this antenna, if you mount the 578 low in a vehicle dashboard or console, your GPS fixes will only be intermittent. In situations where
the GPS signal is weak, the external ’mouse’ antenna, mounted on the exterior of your vehicle will always be best.
In some 578s, you may find there are two u.FL / IPX GPS antenna connectors. If this applies to you, test your GPS antenna in both sockets; I found that connecting the
new internal GPS antenna to the socket closest the volume control resulted in a consistently faster lock. You can also still keep the existing fly lead for the external SMA
GPS socket connected to the other u.FL / IPX socket, and even have both GPS antennae connected and working at the same time, it doesn’t seem to upset the performance
getting a position fix.
members.optuszoo.com.au/jason.reilly1/578mods.htm#Inside 29/35
15/02/2021 AnyTone AT-D578UV mods and information
you simply must use high power for anything other than a very brief call, then there are things that you can do to improve the cooling of the 578 in these circumstances.
The first change to make is to reverse the direction of the airflow over the heatsink fins of the radio body, which is done simply by turning the fan around. Undo the four
screws holding the fan to the back of the 578 chassis, and turn it around so it faces the other way. The fan will now blow air over the heatsink, rather than drawing or
sucking air past the heatsink fins. This seems to be more efficient at cooling the radio. If you are handy with a bit of sheet metal or a 3D printer, you can also make a small
cowl to place over the back of the heatsink fins, which will help direct airflow over them, further improving cooling efficiency. The difference isn’t huge, but worthwhile.
After this is done, you will need to realign the following receiver tracking gain settings: BPFLUA, BPFMUA, BPFHUA, BPFLUB, BPFMUB, BPFHUB, BPFLVA,
BPFMVA, BPFHVA, BPFLVB, BPFMVB, BPFHVB. Feed in a weak test signal at the test frequency indicated, and adjust the value for maximum spot frequency
sensitivity. This is to compensate for the added stray capacitance the shields add to the varactor based front end tuning.
If done properly, this will result in a 2dB noise reduction on VHF, raising sensitivity by the same amount. No improvement on UHF was noticed.
members.optuszoo.com.au/jason.reilly1/578mods.htm#Inside 30/35
15/02/2021 AnyTone AT-D578UV mods and information
be the AM air band receiver.
The following devices are found within:
GD32F303VKT6 ARM Cortex-M4 32 bit MCU with 3072kbyte internal flash and 96kbyte internal SRAM
Toshiba TC58CVG1S3HRAIG 2Gbit / 256Mbyte NAND flash memory
Sicomm CT3258TD baseband processor for DMR with built in AMBE2+ vocoder & 12.2 MHz oscillator
Texas Instruments TLV320AIC3204 DSP / codec
4 x QA4818N transceiver ICs & 26.0 MHz reference oscillators. These devices have the same pinout as the more common AT1846S, but are more capable. One
pair is being used as the 1st Local Oscillator for VFO-A and VFO-B, and the other pair are acting as a direct conversion 1st IF baseband receiver.
RDA 5802N FM broadcast band receiver
YD1517P (LM1517P equivalent) 2x 6 watt audio power amp, working in push-pull mode to give 12 watt output
Two NXP AFT05MP075N LDMOS 70 watt RF power amps, 18dB narrowband gain, one each for independent VHF & UHF power amp stages
VHF and UHF receive front ends each have four stages of varactor track tuned filtering
ATGM336H GPS & BDS (BeiDou) positioning module (GPS models only)
Battery backup for real time clock, plus a second backup battery for ???
578 Toshiba TC58CVG1S3HRAIG 2Gbit / 256 Mbyte NAND external flash memory map
Address in flash Contents
holds alternate language fonts e.g. Chinese, Japanese, Greek, Cyrillic, Roman numerals. There is some English font there but it doesn’t
0x00000000 to 0x0014FFFF
appear to be used at all
0x02FA0000 to 0x02FDFFFF active ’local information’ radio configuration data and backup copy
Flash Utility software: Courtesy of Colin G4EML comes this small utility program that can read and write the external 2Gbit flash memory where the codeplug, DMR ID
database, RF alignment data etc. lives. There are some rules to the safe use of this software:
Reading the flash is perfectly safe, it is the writing of data that you need to be careful with.
Through careless use when writing data, this software can most definitely ’brick’ or disable your radio, or cause hardware damage by writing RF output power
values to destructively high levels for example. You accept all risk in use of the software.
The radio will attempt to prevent overwriting of critical data in certain areas of the flash memory, typically stored between addresses 02F00000 and 02FDFFFF. It is
generally better to create a set of CDD, CDI and SPI files to write to this area of memory, and write using icon update mode to ensure the radio MCU is safely
halted.
If using Flash Utility to write to the flash memory you need to apply a (hex) 20000 byte offset. For example, if you want to write to address 00000000 you should
instruct Flash Utility to begin writing at 00020000. It is unknown why this is necessary, and exactly at what memory address this offset is no longer needed, but it
applies at least as high as address (hex) 04000000.
You should write to the radio in multiples of 256kbytes, even if you only want to change just one byte. (Do not forget the 128k offset that needs to be applied) This
restriction doesn’t exist when only reading the flash.
I *** STRONGLY *** recommend you make a backup of your flash memory contents by reading at least the critical memory area between addresses 02F00000 and
02FDFFFF and saving to a file, and keep that file in a safe location. You can read the entire flash contents from 00000000 to 07FFFFFF if you wish, but this will take
several hours to read a 1Gbit flash memory via a serial interface.
members.optuszoo.com.au/jason.reilly1/578mods.htm#Inside 31/35
15/02/2021 AnyTone AT-D578UV mods and information
Download Flash Utility software (10kb) from:
Download from this webpage here
Download via Mega
Download via Google Drive
Download via Sabercat host
Flash Utility is compatible with the 578, 868, 878, 6X2 & DJ-MD5. When reading from the radio, it might be a bit confusing to users to have to specify a file before
reading begins - this is the file you will be saving your read results to.
Making a backup
1. It is assumed you already have downloaded Flash Utility as per Making a backup step 1 just above.
2. Download some supporting files (<1 kb) necessary to restoring a backup from:
Download from this webpage here
Download via Mega
Download via Google Drive
Download via Sabercat host
3. Unzip these support files to your directory holding the backup file. You should now have the following files in there: myvital.CDD (your previously saved &
renamed myvital.bin), myvital.CDI & myvital.spi
4. Plug in your programming cable to the radio and your computers USB port, and power on the radio while holding down the P1 button & dial knob. Confirm the
display shows "UPDATE MODE" with a flashing green LED
5. In the CPS programming software, go to menu Tool > Firmware Upgrade (or manually execute QX_Firmware_Update.exe)
6. Click on the Open Update File button, navigate to the directory where you saved your backup, select the myvital.spi file and click Open. Click on OK below the
File Open Succesed! message. (If you have multiple radios and multiple backup files, make absolutely sure you have selected the correct backup file to send to the
connected radio)
7. Ensure Duplex box is ticked, and that Com Speed is set to 921600. Click on Write. This step will restore vital RF tuning data that is unique to your radio back in
flash memory, and takes 25 seconds to complete.
8. Turn the radio off, then power on the radio normally this time, without holding any buttons.
9. You may need to set the time & date. The radio might also power up in Chinese language mode, this is OK, after writing your codeplug to the radio that will be
corrected. You may need to power up the radio in test mode to change the band (MODE) to match what you were using before, if you get Band Error when sending
your codeplug back to the radio.
10. You are now done!
Turn the radio off, leave it off for ten seconds, and turn back on
Turn the radio off, remove all power to the radio for 5 minutes, then reconnect and power on
Attempt a reset: turn the radio off, and then hold P2 and the dial knob in while turning the radio on
Reflash firmware: turn the radio off, then hold the MENU and EXIT buttons down together just after power off, the LED will flash red and you can then use the
CPS software to load your firmware file using Tool > Firmware Upgrade
Reflash the SCT3258 baseband: Download the SCT3258 software, instructions and baseband files (2.85 Mb) from:
Download via Mega
Download via Google Drive
Download via Sabercat host
To enter the SCT update mode, hold down the dial knob and MENU keys while turning the radio on. From there, follow the instructions included in the download
to write the latest baseband file V2.01.07BA to the SCT3258.
members.optuszoo.com.au/jason.reilly1/578mods.htm#Inside 32/35
15/02/2021 AnyTone AT-D578UV mods and information
Once you have managed to regain control of the radio, the first thing to do is re-build your ’codeplug’ to remove any hidden corruption that caused the freeze in the first
place. 99.9% of problems encountered are usually the result of poor ’codeplug’ practices. Using other people’s codeplugs, originating from several CPS versions back,
and then added to piecemeal, is almost certain to cause problems. The solution to this is to ensure your codeplug is rebuilt which ensures the underlying data that your
codeplug is built upon is fresh and consistent with the CPS and firmware version in use. Do not take any shortcuts in the following process!
1. In CPS, load your old saved codeplug and export everything (Tool > Export > Export All)
2. Go through all your Optional Setting and write them down or take screen shots of all the settings there. If you are using encryption, also record all your encryption
keys. These settings and encryption keys are not saved by the Export All process.
3. RESET the radio - this step is very important! If you do not do this, the old & possibly problematic data in the radio is not removed.
4. In CPS, read from the freshly reset radio (yes, you are reading a ’blank’ radio, that is OK)
5. Import everything saved from step 1
6. Finish off your codeplug by attending to the Optional Setting & encryption keys if applicable and confirm all is correct
7. Send the freshly rebuilt codeplug to the radio
8. If you had a custom start up picture or background pictures, send those to the radio now
9. Finally, save the rebuilt codeplug and ensure you use this saved file as the basis for any further changes you may make, and make sure you delete your old
problematic codeplug file.
If these steps have not worked, there is a procedure that may help un-freeze your radio and get you going again. Note that this defroster will only work if the freezing is
caused by memory corruption. If the problem is a hardware failure, then this will not work.
Test that your frozen radio can power up in the Icon Update mode: turn the radio off, hold the dial knob and P1 buttons down together while powering on the radio. You
should see a blank screen with "UPDATE MODE" displayed. If you do not see this screen, this process will not work for you.
9. Turn off your radio, and again hold down the dial knob & P1 while powering on the radio, and confirm the display shows "UPDATE MODE"
10. Start up the CPS, preferably using the most current version CPS available for your model. Go to menu Set > Set Com. Select the Com Port you normally use to
program your radio.
11. In the CPS, go to menu Tool > Firmware Upgrade. Click on the Open Update File button, navigate to the working directory and select the 578 flash fresh reset .spi
file and click Open. Click on OK below the File Open Succesed! message.
12. Ensure Duplex box is ticked, and that Com Speed is set to 921600. Click on Write. This step will wipe your flash memory clean, and takes around 35-40 minutes to
complete.
13. Turn off your radio, and again hold down the dial knob & P1 while powering on the radio, and confirm the display shows "UPDATE MODE"
14. In the CPS, go to menu Tool > Firmware Upgrade. Click on the Open Update File button, navigate to the working directory and select the 1G ICON V1.20
20190226 .spi file and click Open. Click on OK below the File Open Succesed! message.
15. Ensure Duplex box is ticked, and that Com Speed is set to 921600. Click on Write. This step will rebuild icons and text bitmaps in flash memory, and takes 50
seconds to complete.
members.optuszoo.com.au/jason.reilly1/578mods.htm#Inside 33/35
15/02/2021 AnyTone AT-D578UV mods and information
16. Turn off your radio, and yet again hold down the dial knob & P1 while powering on the radio, and confirm the display shows "UPDATE MODE"
17. In the CPS, go to menu Tool > Firmware Upgrade. Click on the Open Update File button, navigate to the working directory and select the myvital.spi file and click
Open. Click on OK below the File Open Succesed! message.
18. Ensure Duplex box is ticked, and that Com Speed is set to 921600. Click on Write. This step will restore vital RF tuning data that is unique to your radio back in
flash memory, and takes 25 seconds to complete. This is another very important step that you should not skip, otherwise your radio will not properly transmit on
DMR.
19. Power cycle the radio normally this time, without holding any buttons. It should boot up somewhat normally this time. You may need to set the time & date. The
radio might also power up in Chinese language mode, this is OK, after writing your codeplug to the radio that will be corrected. You may need to change the band
(MODE) to match what you were using before, if you get Band Error when sending your codeplug back to the radio.
20. You are now done!
I recommend updating to the latest firmware version available for your model after doing this process, if you have not already done so. You MUST reset the radio by
holding down the dial knob and P2 while powering on the radio after doing a firmware update, this is extremely important.
If these suggestions still do not un-freeze your radio then, sadly, it it likely the problem is a hardware fault, and no amount of resets, reloading of firmware or codeplugs,
or performing any special procedure will fix that. You should get in touch with the seller of the radio to discuss repair.
Preventing your 578 from freezing or locking up and how to cure many problems
There are some things that can help prevent your radio from freezing or locking up in the first place.
The same ideas can also cure many strange problems eg: scan speed slowing down, unattended transmit, laggy behaviour, features not working as they should etc.
Follow these suggestions, in this order:
A codeplug built using last version’s CPS will sort of work with a new firmware version, but this mis-match in versions is frequently the cause of many problems. Always
ensure you rebuild your codeplug with a CPS version that matches with the firmware version you are using in the radio!
If you follow these four golden rules, you should never have a lockup or freeze of your radio, and most other problems can be avoided. I’ve been using my 578 from the
very beginning, and have never once had a freeze.
You must ensure your CDD file is 256kbyte or some multiple of that size
You must ensure that your data to be written starts at a 256kbyte page eg: hex addresses 00040000, 00080000, 000C0000, 00100000, 00140000 etc.
And then lastly, you will write this data with an offset of (hex) 20000 bytes above the intended actual location you wish to write to.
Example: you wish to write 256kbytes of data to 0x02F40000. First determine if this is the start of a 256k page. 0x02F40000 is evenly divisible by 040000 (256k) so that
is good. Then specify for data to be written with a 128k (hex 20000) offset, so writing should begin at address 0x02F60000, and the data you write will actually go to
0x02F40000.
It is the SPI and CDI support files that tell the radio where to write this data, and how that should be done that is the slightly tricky bit.
members.optuszoo.com.au/jason.reilly1/578mods.htm#Inside 34/35
15/02/2021 AnyTone AT-D578UV mods and information
SPI format:
20 00 00 00
(number of sections to load in hex)
00
(4 bytes of CDD file length in bytes, little endian)
00 00 00 00
CDI format:
(name of original .bin file followed by 00 then padded out to 256 bytes with 20)
(4 bytes of the starting write address to the radio, little endian - note you need to apply a 0x020000 offset as detailed just above)
(4 bytes of number of bytes to write, little endian)
(4 bytes of the starting point address in the CDD file to begin writing from, little endian)
00 00 01 00
00 00 00 00 00 00
[next record of another section to write, if applicable]
[and so on...]
Exploiting the capabilities of the TLV320AIC3204 audio codec chip. This is a very powerful chip with the possible scope to facilitate DSP noise reduction,
equalisation, tone control and digital AGC audio.
Explore some new fonts, perhaps some screen colour changes and icon customisation
Investigate if the display unit could be remote mounted by use of a longer 40 pin ribbon cable and a custom 3D printed backing plate for physically mounting the
head
Patching the vocoder in the SCT3258 for something else entirely. There is a very strong resemblance between AnyTone’s
SCT3258TD_UpdateFlash_v2_01_05NJ.hex and Hytera’s PD36x series SCT3928_UpdateFlash_V2_01_05PD.hex - both in name and hex content. The Hytera can
already load different hex files for AMBE, SELP, NVOC & COMM vocoders, but this is slightly dependant on the different hardware installed in the Hytera radios.
It would be very interesting to experiment with an open source ham vocoder like FreeDV’s Codec2, and see if this could be used to replace the AMBE2+ vocoder in
the SCT3258. Sadly the SiComm hex code that gets sent to the SCT3258 is encrypted, so for the moment any patching is unlikely
Except as permitted by the copyright law applicable to you, you may not reproduce or communicate any of the content on this website, including files downloadable from
this website, without the permission of the copyright owner.
members.optuszoo.com.au/jason.reilly1/578mods.htm#Inside 35/35