Results 1 to 4 of 4

Thread: MTS2000 ASK Removal for Latest Firmware 8.73

  1. #1
    Join Date
    Dec 25, 2018
    Posts
    7
    Thanks
    10
    Thanked 23 Times in 4 Posts
    Country: United States

    Default MTS2000 ASK Removal for Latest Firmware 8.73

    Here are the details for removing the ASK from the final firmware version of 8.73

    The ASK Flag can be found in the most significant bit of 0x282. Make sure to update checksum at 0x289. In my case the byte was 80. So it became 00. And the checksum was 14, subtract 80 and it became 94.

    I wrote a quick .Net/C# program to take care of the programming for a batch of B5 radios had for $5 a piece on eBay. Many thanks to Mars and the Python scripts written by Paul Banks.

    Communications log. (Adjust your values accordingly in bold.)

    Sending 01 02 00 40 9E
    Echoed: 01 02 00 40 9E

    Entering SBEP Mode
    Sending 00 12 01 06 02
    Echoed: 00 12 01 06 02
    Ack: 50
    Entered SBEP Mode


    Sending F5 17 00 02 82 00 6F
    Echoed: F5 17 00 02 82 00 6F
    Ack: 50
    Received 00 02 82


    Sending F5 17 00 02 89 94 D4
    Echoed: F5 17 00 02 89 94 D4
    Ack: 50
    Received 00 02 89

    Exited SBEP Mode

    Sending 00 00 01 08 7C
    Echoed: 00 00 01 08 7C

    If I get around to it, I'll publish something on GitHub that finds Block 0x31, reads the existing values and adjusts automatically. Best laid plans I hope to get back around to!


  2. The Following 15 Users Say Thank You to Chance For This Useful Post:

    Alpha (Jan 07, 2019),Avery Johannssenn (Oct 09, 2019),b16a2 (Jan 07, 2019),Gtaman (Jan 07, 2019),jry (Yesterday),k1ngfish (Jan 07, 2019),Mars (Jan 07, 2019),MattSR (Jan 07, 2019),medic550 (Jan 07, 2019),Motodan31 (Jan 07, 2019),Notarola (Jan 07, 2019),p47r4ck (Jan 06, 2019),PowerPointRanger (Jan 08, 2019),rainbowpenguin (Aug 12, 2019),slim (Jan 10, 2019)

  3. #2
    Join Date
    Oct 06, 2019
    Posts
    2
    Thanks
    0
    Thanked 0 Times in 0 Posts
    Country: United States

    Default

    I have 5 model H01UCH6PW1BN radios

    800 MHZ model III keypad

    I looked at the location and there is all zeros, but I am getting the error when I try to write the updated codeplug, saying it needs the ASK

    Codeplug ver 000F
    Firmware 08.73
    H37
    flash code 200004-000000-2
    and flashcode 000004-000000-6

    I can send you the cfg files, if you want to take a look and see why these are different from the ones you have

    Thanks

    Bill

  4. #3
    Join Date
    Dec 25, 2018
    Posts
    7
    Thanks
    10
    Thanked 23 Times in 4 Posts
    Country: United States

    Default

    I can dust of the program and send it to you. If anything it will read a raw copy and save an non-encrypted file that I can further look at. Curios to see what you have. I'll post a link tomorrow that you can try.

  5. #4
    Join Date
    Oct 06, 2019
    Posts
    2
    Thanks
    0
    Thanked 0 Times in 0 Posts
    Country: United States

    Thumbs up

    Quote Originally Posted by Chance View Post
    I can dust of the program and send it to you. If anything it will read a raw copy and save an non-encrypted file that I can further look at. Curios to see what you have. I'll post a link tomorrow that you can try.
    Thanks, I will post what I get from the dump from your program