Four dead GP3688 radios... codeplug corrupt

[chrisfeather]

Hi there,
this is my first post on your amazing forum, but I have a problem that I couldn't get solved anywhere and I spent MANY nights researching...

I have numerous GP3688 radios that I can program with the CPS R05.04 - model number CMH65RDJ9AJ2.
However, since a while, four of these give me "Error # 2436 - Codeplug is corrupted. Contact Customer Service Center."
I'm not the only person programming these so I don't know who screwed the codeplugs, and I don't think there's backup copies of those.

Is there any suggestions? Is there a possibility to re-write another codeplug without attempting to re-flash the radios? Can I "produce" a correct codeplug using a HEX editor? Here's what I've come up with so far:

On the batlabs page, there is a mention about re-flashing certain radios with a corrupted codeplug by building a flash adaptor connected to a Y-DB9 adaptor. One end goes to a healthy radio, which will be re-flashed and give all the handshake signals, the other end goes to the corrupted one, the receive pin (3) left out, thus overwriting this radio completely with the healthy radio's data (including serial #, which I wouldn't mind).
http://www.batlabs.com/htpro.html

I have two rib-less programming adaptors with DB-9 connectors that I already modified for -9V on the tip for bootstrap mode.
I'd be most happy if someone could tell me if there's any schematics around that would work with this setting - i.e. a flash adaptor that I could connect to these programming adaptors...? Or building something completely new from scratch?

I'm a quite passionate and experienced DIY builder, so I'm not scared of complicated SMD stuff, though of course I'd prefer an easy solution.

And, most important, what software could I be using and what are the steps necessary? I've read the Waris Labs Kit does nice things but is only for experienced users, which I definitely am not. I'm not even sure what version to use, for a start!

Any help is highly appreciated!
Cheers

[chrisfeather]

OK, no responses so far, but I've had some success, too:

I managed to recover two of the radios using the US Waris Kit R03.08.00 and the codeplug pmue2261aaa_conv_pmor_16ch_pnk_uhf2.0.

First problem, though is that the codeplug was upgraded from 04.03 to 05.01 and my CPS R05.04 won't recognize them anymore. Not that big of a deal, cause I changed the region from Asia to EMEA - and now my CPS R05.13, which I use for all my other radios, can communicate with them, recognizing them as CP140.

Now, if someone had a codeplug version 04.03 or lower, that'd be great! Also, I'd like to know how I can change the serial number in the default codeplug, since now it's 000AAA0000. I converted it to bin, changed the number with a HEX editor, and converted back, but the Waris Labs Kit crashed. I guess I have to adjust the checksum somewhere, but can't figure out how...

==> HOW do I change the serial number in a default codeplug???

The other problem is that, when trying to write the codeplug to the other two, the Kit gave me "unexpected response". When trying to read the model number, it'll just give me a blank space - using the other two, at least I got that information and the version of the (corrupt) codeplug.

I tried re-flashing the firmware, but failed, and now one of the two won't even give the "codeplug read error" tone anymore. Maybe I don't have the correct firmware version?

==> Does anybody have / know where I can get aforementioned codeplug and/or a firmware for this:

Model: CMH65RDJ9AJ2
TANAPA: PMUE2261AAA
CMII ID: 2004FJ1486
VER.NO: R04.01.02

Thanks in advance for any kind of help!
Cheers