I did some work on the TH8900, so I would guess some similarities. Also I would not expect uint or bcd programming, it may be related to programming different values in N and R registers of PLL's. Have you looked at the 8900 driver as a starting point?

if you download the radio, then make a small change on the radio and down load again, it should help understand what you are changing.

On Dec 5, 2020, at 2:22 PM, Hisen Zhang via chirp_devel chirp_devel@intrepid.danplanet.com wrote:

Hi,

I wonder if anyone is working on (or interested in) deciphering TH8600 programming protocol. It looks rather weird to me.

First of all, the downloaded bit stream for each request does not correspond to each channel. Modifying channel 2 for instance, may result in the fifth request response change.

Second, even the same channel setting will result in different bit stream, despite the address and check sum.

Third, I don’t really get the frequency representation. It’s neither lbcd nor uint (I think). I cannot assert here because I am still very confused about the two issues above.

I am new to protocol reverse engineering so I would like to learn if I just made the problem complicated. If anyone is interested in I will share captured serial bit stream. Big thanks.

Best regards, Hisen (Zhemin) Zhang _______________________________________________ chirp_devel mailing list chirp_devel@intrepid.danplanet.com http://intrepid.danplanet.com/mailman/listinfo/chirp_devel Developer docs: http://chirp.danplanet.com/projects/chirp/wiki/Developers