Changing KML link

Starting with firmware version 2.8.0 KiSS has chosen to encrypt the KML link, so there is not so easy to change it as before.
Now it is xored with some key. Key changes every 4 bytes (bytes 0-3 are xored with key1, bytes 4-7 with key2 and so on). Keys (hex):
0B 19 39 83 2D B4 37 4B

URL offset in (uncompressed) bin/init for DP-500 (decimal): 1046568
Encoded original webradio link:
 63 7F 7F 7B 23 36 36 2B 08 0B 17 08 B0 B3 AD B1 1E 03 1C 1F 8D 9B DD DA 53 52 4F 19 3B 23 3B
Encoded tinystocks link:
 63 7F 7F 7B 23 36 36 6D 50 57 40 4A F7 EC E0 E8 5E 03 4E 42 D9 9B DF 9B 5C 44 44 19 3B 23 3B
I find it very funny that you do not have to know the keys to encode your own URL, because xor operation has some nice properties. You can change the link using this program, just compile it and execute:
xor /tmp/dp500/bin/init http://tinystocks.com/k/kss.php
But remember, bin/init is compressed now and in layout.txt there is a checksum of romfs.bin. So the complete procedure should be something like the following:

How to change the link

You can find md5sum, genromfs and flthdr utilities here.