HOW TO PROGRAM CDM1550 MOBILE OUT OF BAND? NEED HELP.

[squelch]

Need more help to program CDM1550 out of band.
The instructions here refer to hex editing a file named GP300.EXE that
contains the band limit information.
I cant find the file in any version of the program.
Is there a specific version this works with, or any other help.?

[nmfire10]

Umm. CDM1550? GP300? What am I missing here?

[squelch]

That's what it says here on Batlabs under Out Of Band for the CDM radio.
What I need is a clarification or additional instruction.

[nmfire10]

I don't know if that is an error on the page or what. There is no GP300.EXE and no one has ever made a CDM go out of band here. It has been tried like hell and I know people are working on it but it hasn't happened yet. Finding a different bandsplit and trading is probably going to be easier than hacking it.

[thebigphish]

dude, first of all, the out of band info that you're talking about is only gonna work on a GP300 (hence the GP300.EXE), the out of bandstuff is model specific, and your model isn't the one you looked up...RTFP.

second of all, research, research and the re-search the info that you need when you're doing something like that, check your model numbers, learn that the model you're trying to program doesn't use a program like GP300.EXE to program (the CDMs use RSS) and then atleast look to find if the model is capabale/ or if anyone has found ways to push it out of band.

aight?
poke around batlabs

[thebigphish]

yeah ,the batlabs page under the model specific info is rather vague, and that section shouldn't be there, but yeah...that model (CDM1550) isn't capable of out of band AFAIK...and that section on GP300.EXE is model specific (GP300). so, um...sorry.

[jim]

He's right- Batlabs' Waris section says to edit the GP300.exe file on CPS 1.0 !

[Sundown]

dude, first of all, the out of band info that you're talking about is only gonna work on a GP300 (hence the GP300.EXE), the out of bandstuff is model specific, and your model isn't the one you looked up...RTFP.

Dude, that's harsh...

Especially as if you go to Batlabs, click on the Model Specific Info, and click on CDM1550 you get this page: http://www.batlabs.com/htpro.html

Which if you scroll down to the section labelled Out Of Band, you'll see the exact text he's referring to...

RTFP yourself

[thebigphish]

RTFP yourself

caffiene and sleep before post...sorry all.

yeah i know that was harsh, but i did go hunt for it, because i recall reading it before...it sounded vaugely familiar, and i'm always doing model lookups on that page...squelch was misled by a confusing entry. i think someone disconnected my brain-finger deadman's control interlock.

i have a copy of GP300.EXE for programming a GP300.EXE, on the copies of the CPS that i have for CDMs...there is no GP300.EXE. Squelch, that section is for a different radio make and model, so don't bother.

best guess is, the section on out of band is in the wrong place.


yeah i was a dick. but i apologize. 20 hour days with school, phys. therapy, 4 hrs of commute, and then more school will make me cranky. my bad.

[Sundown]

heh... we all have days like that I think

Unfortunately the HT/CDM info page on Batlabs is currently in error. That info is in the wrong place, and so far there is no way to out of band the radios. That's being worked on by various people though.

[wavetar]

That information is correct for the very earliest versions of the Waris CPS! It's not a mistake. They are even referred to in Europe as the 'Professional GP300 Series' and 'Professional GM300 Series' in the RSS & Flashing Upgrade packages.

As far as taking the Waris radios out of bandsplit, it hasn't been done for the later versions of CPS...yet.

Todd

[wireless.friendly]

Still no any news about?

[HLA]

the news is that the band limits are permanent in the firmware and absolutely can NOT be changed. that info isn't anywhere in the cps anymore.

[wireless.friendly]

HLA

It is pitty

[RADIOMAN2002]

After spending many hours on this same problem with a 1250, I have found that the codeplug itself is encrypted each time its opened and resaved. Thats the first problem. I am not sure about the firmware in the radio, since I haha succesffuly changed both the model and serial number on the codplug and yet when decoded by the software still reads the original serial and model. The info is stored elesewhere in the codeplug, hence the encryption problem.
If anyone is working on this problem, I suggest trying to find where in the software the encryption takes place and either disable it or make it easier to decode

[wireless.friendly]

RADIOMAN2002

Encrypted codeplug? Very interesting.

Motorola not looking for easy ways

[MattSR]

You cant disable it.

In fact, the latest version of ASTRO CPS will not save codeplugs when installed on a French copy of Windows because the encryption used is not allowed to be exported to France!

[Andreas]

What frequency/bandsplit,do you want to program?

Andreas

[wireless.friendly]

You cant disable it.

In fact, the latest version of ASTRO CPS will not save codeplugs when installed on a French copy of Windows because the encryption used is not allowed to be exported to France!

And how works users? Keep only one (last) codeplug inside radio? =)

[wireless.friendly]

What frequency/bandsplit,do you want to program?

Andreas

For e.g. repeater on this pair: 470/475.

[Andreas]

You can use the lab flashtool and program a codeplug with higher bandsplit into the radio.

Andreas

[wireless.friendly]

You can use the lab flashtool and program a codeplug with higher bandsplit into the radio.

Andreas

As I know, flashtool upgrades firmware in flash. In which here codeplug?

And what with info above - that codeplug encrypted? I cannot patch codeplug if it is encrypted.

[RADIOMAN2002]

I know this is an old post, but since information on this topic is very sparse I decided to post this information, I found what Andreas has said to work using Lab. I have a "R" band CDM-1550 that I needed to put a few 470-480 channels in. I first tried to only program the hardware code plug in only, but it didn't change the the 470 error in the software, when I tried to program in the application code plug only the radio barfed, so I had to reload both hardware and application code plugs. Needless to say you will have to retune the entire radio, even if you saved the tuning info. I havn't taken the radio much above 482 and down to 453 and it seems to work well. I don't need ham so I guess in this case it works to my satisfaction.

[N6LAU]

Needless to say you will have to retune the entire radio, even if you saved the tuning info.

Please elaborate. I was under the impression that saving an archive file using Global Tuner saves all tuning data and that all you had to do is load this saved archive file and "program all" into the radio to restore the tuning of the radio.

Joe

[HLA]

You are correct, if you save the tuning information you can just re load it to the radio but what's gonna happen is you want to put frequencies to 480 in it and the radio is not tuned to handle those frequencies so it will have to be tuned again to handle a different bandsplit or wider range. It's been proven that you can take a ht1550 out of band with the red battery, i've had my vhf down to 120 and 122 and listen to the local airports, it's am and sounds like crap but it is going down that far

[d119]

It's been proven that you can take a ht1550 out of band with the red battery, i've had my vhf down to 120 and 122 and listen to the local airports, it's am and sounds like crap but it is going down that far

Details?

[HLA]

go to the radio configuration tab and go to edit mode and I changed the lower limit to 118 and wrote it to the radio before the cps could catch the mistake. then turn the radio on with the red battery on it and go to one of your editable channels and you can take it all the way down to 118

[d119]

What exactly do you mean "before CPS could catch the mistake"?

Can I use this to take a 403-470 radio up to 520MHz? (Theoretically, of course. We know the RF hardware likely won't work up that far).

[wavetar]

What exactly do you mean "before CPS could catch the mistake"?

Can I use this to take a 403-470 radio up to 520MHz? (Theoretically, of course. We know the RF hardware likely won't work up that far).

The OOB work around for the HT1550 with the FPP battery has been around for about 6 years now:

http://batboard.batlabs.com/viewtopic.php?f=1&t=52682

[RADIOMAN2002]

I seems that there is 2 different radios being talked about here. The OP was asking about a CDM, I can reconfirm that the Adreas trick does work. I now have a 406-470 CDM working on 478 and 481 channels. (BTW the radio started out as a CDM750 and is now a CDM1550 LS) The reason I stated that the radio has to be completely retuned is because the tuning points for the radio after changing to an "S" split are different.The front end tuning was way off, like 7mv sensitivity before retuning. The reference osc was OK, but the power out was way too low. I also didn't push the radios transmit power too high on the 480 channels to only about 35 watts, and the 450-470 channels worked out fine.
Now as far as the HT-1550, this is the first I heard of the red battery trick. I might try that. I see no reason why it shouldn't work on a HT-1250 as well.
On another note I had a reason to band shift a HT1250 to 450-512 yesterday. The radio works fine with only minor tweaks for deviation. So this appears to be the method of choice, I just wish there was some way of modding the 220 model.
My next project is to see if I can take a VHF up to 220. I see no reason why if I change the few components in the VCO and front
end it shouldn't work. It's going to be my test radio for Positive Train Control.(another unfunded Federal mandate)

[motorola_otaku]

I seems that there is 2 different radios being talked about here. The OP was asking about a CDM, I can reconfirm that the Adreas trick does work. I now have a 406-470 CDM working on 478 and 481 channels. (BTW the radio started out as a CDM750 and is now a CDM1550 LS) The reason I stated that the radio has to be completely retuned is because the tuning points for the radio after changing to an "S" split are different.The front end tuning was way off, like 7mv sensitivity before retuning. The reference osc was OK, but the power out was way too low. I also didn't push the radios transmit power too high on the 480 channels to only about 35 watts, and the 450-470 channels worked out fine.

Or you could just extend the upper band limit of a R-split codeplug.

What's the benefit of making a R-split radio think it's S? I heard about people doing that a couple of weeks ago and it doesn't make any sense to me now that the bandsplit hack is public knowledge.

[RADIOMAN2002]

I believe that's the whole idea for this post. The original OP was looking for a way to do just that, and never received an answer. If you have a another method please explain, and If you are alluding to unpacking the code plug after running it through a 3DES decoder, that's a lot of work. Other wise until a better method is documented, I will stick with this.
BTW would unpacking a factory default code plug, lets say from Unofficial Lab be easier?

[Andreas]

Yes,it´s much easier,because they are S-Records in the labkit.
To get a codeplug from the radio in binary or S-Record format,you can read the radio with the Russian Waris Codeplugtool.

[motorola_otaku]

If you have a another method please explain..

http://batboard.batlabs.com/viewtopic.p ... 58#p422570

[RADIOMAN2002]

I totally forgot about this post, even though I answered some question on it. Thanks for bringing it up again to remind me.