Hi, I hope the mere initialisation of this project will encourage people to share what they know about the UT390B+. It's cheaper than the UT390B so if it can be hacked for microcontroller communication, there would probably be plenty of people keen to use it. All dismantling of your devices is at your own risk!

Firstly, take of the battery compartment to get right inside. There is one screw visible, one under a QC sticker inside the battery bay and one under the laser hazard sticker on the back of the UT390B+ (which by now should be facing you, just above the battery compartment. Remove the stickers and take all three screws out.

Now I wasn't sure how to separate the enclosure pieces but it appears that the front and back are still held together once the screws have been moved by a firm press-fit grey plastic band all round the optics at the front of the UT390B+. I pulled the two halves apart and the front ring suddenly popped off unharmed. I can't really see a less risky (of breaking the grey ring) way of doing this.

Inside is a flat flex cable from the main PCB (mounted in the back half of the case) to the button pcb (mounted in the front half). This was instantly pulled out of the ZIF connector on the button PCB when the two halves snapped apart but it looks unharmed.

We can now see the main processor (looks to be STM32F 030CBT6 - not sure how many digits on the chip are required to ID), the screen, piezo buzzer, laser diode and laser optics. The laser optics looks like a large (10-15mm) lens with two smaller lenses moulded into one side of it. I hope someone can determine which method of ranging this device uses (I know that's been asked over at Instructables).

If we remove the PCB (two small screws), only the two power wires are connecting it to the case. Look underneath and there are the five pads which are visible in the battery bay and two prominent pads labelled (tantalisingly) RxD and TxD. Unfortunately, they don't appear to be recognisable serial contacts.

Not far from the RxD and TxD pins is a single via which goes all the way through. My cheapo DSO138 oscilloscope showed a nice sine wave off this pin when the laser was firing. Maybe that'll help those wondering what method this device uses to determine distance.

More soon, including pictures. Please get involved if you have a UT390B+ and have ideas about getting the external comms working.