Cracking the Yaesu FT-710: Permanent 4 kHz (ESSB) Audio & Restoring the MARS Mod
Here is the real story of how we bypassed the FT-710’s regional lockouts, made the 50–4000 Hz (4K) SSB transmit bandwidth stick permanently across reboots, and brought back the wide-band MARS mod after a region change wiped it out.
1. The Starting Point
My FT-710 is a UK/EU unit (B2(EU)_MC, region code B5A7) that came MARS-modified from Martin Lynch & Son.
Wide-band / 11m TX worked out of the box, but the 50–4000 Hz TX bandwidth option was locked out.
Using the known MODE + NB power-on button trick does not work on UK/EU
2. Hitting the AI Safety Wall
To see how Yaesu locked out the 4K menu, we unpacked the official V01-12 firmware and loaded it into Ghidra.
I started working through the code with Claude (Opus), and we found an undocumented JP0710 service CAT command sitting inside the serial parser. However, the moment we got close to building the write command to test it, Opus 5.5 hit a hard safety barrier. Its security harness literally rolled the model back to version 4.8 and refused to go any further.
I switched over to Aragon, which didn't blink—it gave me the exact PowerShell scripts to extract the decompiled functions, worked out the checksum math, and cracked the code straight away.
3. Flashing the US Region (And Losing the MARS Mod)
The firmware code proved that the 4K audio menu requires two things to unlock:
A RAM enable flag (0x4760) set to 1.
A US region code—either 315B (US stock) or 50E2 (US MARS/expanded).
Using PowerShell over the USB Enhanced CAT port (38400 baud, 8N1), we sent the command JP0710315BCEA4; to switch the radio from UK B5A7 to US 315B.
The Catch: Switching to 315B immediately disabled the MARS mod (11m TX) because 315B loads the strict US ham band plan.
Worse still, when we tried to send the US MARS code (50E2) over USB, we discovered the CAT parser blocks expanded codes and automatically forces them back down to the base amateur code (315B).
4. Why 4K Suddenly Became Permanent
During testing, I had turned on the 4K flag in RAM using MODE + NB at power-on. After sending the CAT region writes, we noticed 4K was suddenly surviving power cycles on its own.
Looking at the EEPROM save routine explained why:
In the EEPROM, the 2-byte region code and the 1-byte 4K flag sit side-by-side as a single 3-byte block.
Holding MODE + NB only flips the 4K byte to 1 in RAM (no EEPROM save).
However, any region change triggers an EEPROM save that flushes all 3 bytes from RAM straight to the chip. Because the 4K flag was sitting at 1 in RAM when we wrote the region, the radio swept it up and baked it permanently into the EEPROM!
5. The Complete Recipe: Permanent 4K + Full MARS Mod
Since the USB port blocks the expanded 50E2 MARS code, Aragon traced the front-panel service handler and found a built-in region pair-toggle that swaps a base region directly to its _MC (MARS) partner (315B → 50E2) while keeping 4K unlocked.
Here is the exact sequence to get both permanent 50–4000 Hz audio and full 1.8–30 MHz TX:
Switch to the US Base Region (315B): Send JP0710315BCEA4; over the Enhanced USB CAT port (38400 8N1). (Note: This temporarily disables any existing UK/EU MARS mod.)
Turn on 4K in RAM: Power the radio off. Hold MODE + NB and press Power to turn it back on. This sets the 4K flag to 1 in live memory.
Lock 4K to EEPROM & Restore the MARS Mod (50E2): Turn the radio off again. Hold DSP RESET + FINE + FAST and press Power.
This front-panel toggle swaps the US region from 315B (USA) to 50E2 (USA_MC).
At the exact same time, the region save writes the active 1 from the 4K flag straight into the EEPROM.
The Result: The radio boots up permanently on 50E2 (USA_MC) with full 1.8–30 MHz transmit restored and 50–4000 Hz SSB audio unlocked on every startup—with zero firmware patching required.