Batboard

So we got a bunch of radios in trade that are all password protected. Has anyone had any luck rooting out the password using a hex editor at all?

If so, details on how that's done would be greatly appreciated.

Pretty sure you can call the system support center or enter in a case - they will look up the SN's and give you challenge codes which are good to bypass the password. That's how they do it for APX & Astro25, I would only assume it applies to Trbo as well

You should be able to do a recovery also in the CPS which will firmware update and load a generic codeplug in it.