Motorola MTX 9250 Programming Software

Anyone know what programing software i would use to program the Motorola MTX 9250 Hand Helds? The HTs are programmed by the previous owner but i would like to program other frequencies/repeaters for the areas i travel to.

MTS2000 ASK Removal - the cfg files

I have 5 model H01UCH6PW1BN radios

800 MHZ model III keypad

There IS a known problem with the Motorola RIB

There IS a known problem with the Motorola RIB and most of the knockoff copies.

See: http://www.batlabs.com/images/rib_mod.jpg

See: http://www.batlabs.com/2wayrib.html

Motorola XTS2500 Model 3 - ASK/ACK "Write Protected" flag

Motorola XTS2500 Model 3 700/800 Mhz Astro P25 9600
ASK/ACK "Write Protected" flag

The ASTRO Saber, XTS3000 and ASTRO Spectra CPS and codeplug structure is VERY MUCH the same. However, the offsets and data value(s) used, seem to be different. I have not successfully mapped them out yet, but the ASK/ACK flag is most likely in the radio-wide block, which is just after the second instance of the model/serial strings. If someone wants to research/post the data for that tier, it would be fantastic.

The coding team is also working on a modification to the ASTRO Portable/Mobile CPS release which will add a checkbox in the Radio Wide/Advanced tab, for the enabling/disabling of the ASK/ACK "Write Protected" flag. We just need to trace out the offset, first. This checkbox would mimic what's available in Lab/Depot CPS.

ASK byte moved in MTS2000

Just to add a little more on the code plugs. Values are not stored in particular addresses. Instead there are a series of blocks. Between different firmware and/or CPS versions the location where a block might shift around.

0x0200 is where the first block is written. Block 30 starts here and is 79 bytes in length for the latest firmware. Then Block 31 contains the ASK setting.

This is what I know about Block 30 so far:

XTS5000 M2 7/800 MHz off eBay with a ASK

I bought a XTS5000 M2 7/800 MHz off eBay with a ASK. Can someone post those files from P25 here or send them to me

Motorola ASK Removal

ASK was a great blunder on Motorola's part. It pretty much ensures that a surplus radio will REMAIN an active threat to the system it used to be part of long after it's been sent to surplus. With no EASY (and technically legal) fix for it.

If you wanted to secure your radios so that once you sell them they can't reappear on your system and cause problems, ASK is by no means the way to do that. Quite the contrary, it almost guarantees that the surplus radio will ALWAYS be programmed with your system data on it. STUPID.

Why? Because only a holder of the original ASK can remove the ASK restriction on that radio. And since many departments have their own radio maintenance personnel, the odds of getting to that is, paradoxically, quite low.

Granted, there are other ways around ASK. The tool you seek is one of them. Sending it to Motorola's depot is the other.

MTSX Labtool R03.00.02

MTSX Labtool R03.00.02

I have MTSX LABTool R03.00.02 but I’m getting the “Codeplug Too New” error when I try to read it with the LABTool…

I am in need of a clean codeplug for a 900 MHz MCS2000 Type III

ASK removal

im trying to get around an ASK write protected astro25 radio I bought used on ebay. There is a tool posted over at P25 that are two files, cpfix-ASK_ACK_removal.zip and CpFixFilePackage_ASK.zip.

I already have Cpfix.

I just finished joining up there only to see that 5 post min to download and they seem to have some very strident moderation going on, and I havent been able to find the files for DL somewhere else.

ASK byte moved in MTS2000, can't find it

I have several MTS2000 model III radios
They are
H01UCH6PW1BN
Codeplug: 000F
Firmware: 08.73
Package: H37
Flash code: 200004_000000_2 & 000004_000000_6

I have read that the byte that controls the ASK is at 0X282 with the checksum at 0X289, that is the most current, the previous location was 0X28E,

but,  the location has moved again

The 2 lines before and after this area in the codeplug are now all 00

Does anyone know where they moved the ASK byte to for this model radio with this flashcode and firmware ?

MTS2000 ASK Removal

Here are the details for removing the ASK from the final firmware version of 8.73

The ASK Flag can be found in the most significant bit of 0x282. Make sure to update checksum at 0x289. In my case the byte was 80. So it became 00. And the checksum was 14, subtract 80 and it became 94.

I wrote a quick .Net/C# program to take care of the programming for a batch of B5 radios had for $5 a piece on eBay.