CP200 out of band programming

[kb2crk]

I have a CP200 VHF that is set for 146mhz and up. I would like to know if I can hack the CPS to allow me to program below 146 for a few repeaters. I have done a search and asked the question on a thread about region hacks but I could not find the info for the CPS I am using. I am using the 5.16 CPS. Is there a way to do this or should I sell or trade this radio and get one with the slightly lower band split. I would prefer to use the one I have if possible.

Thanks
Paul

[kb2crk]

any ideas where to start?

[wavetar]

No bandsplit hacking information for the Commercial Series has ever been posted, to my recollection.

[kb2crk]

Well that is not good....
I guess I need to start from scratch.
It may be easier to sell this radio and get one with the right split.

[motorola_otaku]

I'm not entirely sure what the guys are talking about, but there is a bandsplit "hack" described here: http://batboard.batlabs.com/viewtopic.php?f=15&t=81925

IIRC the Waris flash tool came with codeplugs for Commercial Series radios. If that was the case you could probably do the Waris bandsplit hack.

[kb2crk]

I'm not entirely sure what the guys are talking about, but there is a bandsplit "hack" described here: http://batboard.batlabs.com/viewtopic.php?f=15&t=81925

IIRC the Waris flash tool came with codeplugs for Commercial Series radios. If that was the case you could probably do the Waris bandsplit hack.

I was looking at that thread but the numbers don't line up with the ones in the CPS I am using.

[motorola_otaku]

I was looking at that thread but the numbers don't line up with the ones in the CPS I am using.

They're not talking about editing CPS, they're talking about editing a radio codeplug.

My friend send me e-mail:

The task: Program CP040 H50KDC9AA1AN 146-174 at 145.500 MHz.
Read radio with CPS and save file codeplug.cps.
Open file codeplug.cps in HexWorkshop, find Hex "BBA5A5A5A5A5A5".
You will find it three times.
First entry is "A4A5A6BBA5A5A5A5A5A5". It is Motorola VHF Base frequency - 103.000000 MHz.
Second entry is "A4A1A3BBA5A5A5A5A5A5". It is lower limit - 146.000000 MHz.
Third entry is "A4A2A1BBA5A5A5A5A5A5". It is upper limit - 174.000000 MHz.
So alphabet seems as follows:
A1 = 4
A2 = 7
A3 = 6
A4 = 1
A5 = 0
A6 = 3
AD = 8
BB = "."
Change lower limit to "A4A1A1..." and save file.
Open file with CPS , enter frequences and program radio. Save codeplug on disk.

Problems: Radio possible to program ONLY ONCE.
Radio works orderly, but is not read and is not programmed by CPS.
Needed to save data from EEPROM IC and restore at need of reprogramming,
or use Radio Firmware Kit.

I hope it works for all Commercial_MDC radios. I read somewere CPS R05.07 can reset hacking codeplug to default.

The part that doesn't make sense to me is, for this to work the codeplug would have to be saved by CPS in an unencrypted format which almost certainly isn't the case.

[escomm]

I think that's why the CPS will only program it one time, requiring recovery in the future via dumping the EEPROM data back in or reverting with the firmware kit.

[Sergio MD]

Not right place, but anyway.
Commercial series CPS R05.07 and above can reset hacked codeplug to default when read radio.
Latin american guys solve offband problem years ago with software Xtreme.

[kb2crk]

It is a Hacked codeplug to get it to work. Somebody hacked my codeplug for me and sent it back. It worked great and the radio works great. I need to compare the old and new codeplug files to see what was done so I can do it myself next time.