http://www.kb2ljj.com/data/yaesu/VX-8R.htm
This claims to document a soft mod that's accessible via magic key combinations but I don't know that it necessarily involves memory that's exported in a clone
I forgot about this entirely until just now. I had tried it once upon a time and didn't get it to work.
Yes, that is what I was referring to as to a backdoor that was available for the -8R, but stopped working for the -8DR even after using AH29D instead of AH029 as the identifier for the VX-8DR.
Some people reported that it also didn't work after removing the resistor, but I never understood why you would try it or need it after doing the h/w mod....
If, however, it does, then maybe we could use that to figure out where (if at all) it's triggered in the memory.
Yes, the before and after from an original -8R not an -8DR would certainly be helpful.