MCS2000 Serial Number Change

Forum Software Discussion Software Modification & Tweaking

MCS2000 Serial Number Change?

Thread: MCS2000 Serial Number Change?

Log OutSettingsMy ProfileNotificationsWelcome, tristen

Home What's New?

Forum Home New Posts FAQ Calendar Community Forum Actions Quick Links Advanced Search

Results 1 to 25 of 40 Page 1 of 2 1 2 Last

Thread Tools Search Thread Rate This Thread Display

04-30-2012, 06:23 PM

Join Date:Location:Posts:

Mar 2012FLASHRom

104

MCS2000 Serial Number Change?

I recently converted two MCS2000s to different models. I had two radios, one a Model 1 with

7.70 firmware, one a Model 3 with 5.42 firmware. I basically just swapped radios between the

control heads turning the Model 1 into a 3 and the 3 into a 1 so that I could utilize the

rebanding capable firmware for the Model 3 platform.

The task at hand is changing the newly Model 1's serial number to match what the sticker

says. As it had the formerly Model 3's s-record dumped into it the serial number was inherited

as well. Can anyone here direct me on how to properly change the serial number in the

s-record without buggering things up or is there another way to go about it? I would just do

the MCS RSS clone trick to change it but it has a CPS codeplug. Any help or insight would be

appreciated. Thanks.

#1

Senior MemberMODAT

Reply Reply With Quote

04-30-2012, 07:23 PM


Dec 2011A Sovereign Nation

2,581

Exact same procedure: http://www.p25.ca/threads/352-ASTRO-...=2019#post2019

#2

T S - AdminstratorMars

Forum

MCS2000 Serial Number Change? https://www.p25.ca/threads/358-MCS2000-Serial-Number-Change?hig...

1 of 14 1/06/2013 2:21 PM

In need of a firmware update? Rebanding? Ancient firmware? Need 9600bps flash for3K/ASTRO Saber? See my ad.

I DO NOT USE Private Messaging. Please use email: mars(at)p25(dot)ca.

Please DO NOT email me with general technical questions. They are to be posted on the forum. I am not tech support.


05-01-2012, 05:07 AM


Mar 2012FLASHRom

104

Okay, thanks. I'm pretty much clear with the procedure although the one part I'm not

following is in step 16 where it says to count 72 forward to reach the block that needs to be

changed. I'm not clear on what counting 72 forward means and how that will bring you to the

proper block. Little help?

#3

Senior MemberMODAT


05-01-2012, 08:05 AM


Dec 2011Avalon

930

Ok look at this pic, the byte in green is the Beginning of Block marker, this designates the

size of the block in Hex so this block is 0x48 (72 in decimal) bytes in length.

The data block is highlighted in blue and selected. If you look in the green rectangle on the

bottom you will see the size of the selection which is 72 decimal (0x48 in hex) bytes long.

The byte in red is the end of block checksum, it follows the data block.

The next Beginning of Block starts immediately after the first blocks checksum

#4

T S - ModeratorMagnus


2 of 14 1/06/2013 2:21 PM

Attached Images


05-01-2012, 08:03 PM


Mar 2012FLASHRom

104

Got it Magnus, thanks. You basically just count the number of bytes forward of the value

contained in the beginning of block starting with the first byte after it. One additional

question, there is an additional header added to the beginning of the srec (seems to be a

product of the import or export process) which remains present in the final product. Is this to

be deleted or left there?

#5

Senior MemberMODAT


05-01-2012, 09:10 PM

Join Date: Dec 2011

#6


3 of 14 1/06/2013 2:21 PM

Location:Posts:

Avalon930

Its a s0 record, it is a memo only and can be left alone as they are not written to the device

memory.



05-01-2012, 10:26 PM

Join Date:Posts:

Apr 2012122

Change ASTRO series & MCS2000 also can use MTSX LAB?

#7

Senior Memberxts2500


05-02-2012, 04:21 AM


Mar 2012FLASHRom

104

Thank you.

#8

Senior MemberMODAT

Originally Posted by Magnus

Its a s0 record, it is a memo only and can be left alone as they are not written to the devicememory.


05-02-2012, 07:43 AM


Dec 2011Avalon

930

#9


Originally Posted by xts2500


4 of 14 1/06/2013 2:21 PM

If your just pulling and pushing s-records it does not matter what version of lab you use

(astro lab or mtsx)

Change ASTRO series & MCS2000 also can use MTSX LAB?


05-02-2012, 01:32 PM

Join Date:Posts:

Feb 20121,058

If you have a acrhive codeplug for RSS lab you can use the clone feature to change the serial

number.

#10

T S - ModeratorNotarola


05-04-2012, 02:51 AM


Mar 2012FLASHRom

104

Here's a question. If you use this same procedure to change part of the model number, say on

a MCS2000, from UJN to UGN will the CPS recognize that the formerly higher power codeplug

is now a lower power codeplug? In other words does the CPS determine the basics of the

codeplug (power level, model 1 2 or 3 etc.) simply by looking at the model number or is that

data embedded somewhere in the codeplug?

#11

Senior MemberMODAT


05-04-2012, 08:22 AM



2,581

#12


Originally Posted by N6LAU

Here's a question. If you use this same procedure to change part of the model number, sayon a MCS2000, from UJN to UGN will the CPS recognize that the formerly higher power


5 of 14 1/06/2013 2:21 PM

Yes, that's correct. But you may also wish to check some of the features in the FDB, to ensure

they also match up.

I don't have a FDB for the MCS/MTS done up, yet, but you can certainly view it yourself by

downloading Resource Hacker, then opening the CPS executable for MCS, and doing a find

(CTRL + F) for certain strings, similar to what you see in the ASTRO FDB. Then peruse it and

try to match up the FDB to control head features, etc.

I realize I make it sound easier than it is, especially if you have no prior experience in tinking

with Resource Hacker. When I have some time in the coming weeks, I'll try to get the

MTS/MCS FDB identified and tagged.

Kind of sad in a way we're just getting around to working with a nearly 20-year-old radio,

now, when certain other boards had at least a decade to do it. I guess fear, control and

paranoia stifled anyone from being productive.




codeplug is now a lower power codeplug? In other words does the CPS determine the basicsof the codeplug (power level, model 1 2 or 3 etc.) simply by looking at the model number oris that data embedded somewhere in the codeplug?


05-04-2012, 09:31 AM

Join Date:Location:

Posts:

Nov 2011Sleeping under a

tree456

#13

she did oral... that is it.Pezking

Originally Posted by Mars

Yes, that's correct. But you may also wish to check some of the features in the FDB, toensure they also match up.

I don't have a FDB for the MCS/MTS done up, yet, but you can certainly view it yourself bydownloading Resource Hacker, then opening the CPS executable for MCS, and doing a find(CTRL + F) for certain strings, similar to what you see in the ASTRO FDB. Then peruse it andtry to match up the FDB to control head features, etc.

I realize I make it sound easier than it is, especially if you have no prior experience in tinkingwith Resource Hacker. When I have some time in the coming weeks, I'll try to get theMTS/MCS FDB identified and tagged.


6 of 14 1/06/2013 2:21 PM

I'm positive it has been done before as has the legacy Astro FSB. The problem is Alec is either

in bed with Motorola or too chicken **** to stand up to them.

It helps that both lines are no longer supported.

Kind of sad in a way we're just getting around to working with a nearly 20-year-old radio,now, when certain other boards had at least a decade to do it. I guess fear, control andparanoia stifled anyone from being productive.


05-04-2012, 10:15 AM

Join Date:Location:Age:Posts:

Feb 2012Rota, Spain

2647

Once you get Resource Hacker running and have opened the MCS2000.exe file. Go into the

dialog folder and go down to the 2556 folder and that's where it starts to map out the FDB's

for the MCS.

I just checked the MTS2000.exe file and it is the same. Just a matter of recording the

changes and posting them somewhere on here. They are really not that different from the

Astro FDB's.

I did try to modify the flashcode on one of our old MCS2000's that's running firmware 7.71 all

I was doing was enabling SmartZone and Full Spectrum Scan, I kept getting a Fail 01/82 even

after double checking the math that Hex Workshop did on my behalf.

Would it be OK to post the before and after Hex strings here for others to look at and see if I

messed up somewhere?

Last edited by WB4JGI; 05-04-2012 at 10:16 AM. Reason: spelling

#14

MemberWB4JGI


05-04-2012, 11:08 AM



2,581

#15


Originally Posted by WB4JGI

Would it be OK to post the before and after Hex strings here for others to look at and see if I


7 of 14 1/06/2013 2:21 PM

Absolutely, Stu. Motorola can't incur a financial loss from a radio they no longer support.

Although in speaking with a lawyer yesterday, it was pointed out to me that by us supporting

these older "unsupported" radios, we could be slowing the sale of newer radios (ASTRO25,

APX) which would cause them a financial loss. However, it's also reasonable to assume the

members of our site would not likely purchase a NEW, $5000+ radio from Moto. This brings us

back to the reason we're still using secondary-market radios to begin with. COST.

Moto should be grateful of our loyal following associated with their brand and products. We go

out of our way to assist customers who are otherwise being told to buzz off.




messed up somewhere?


05-04-2012, 12:19 PM

Join Date:Location:

Posts:

Nov 2011Sleeping under a

tree456

Motorola tells people the same thing for supported radios unless they are purchasing

upgrades for current radios if they don't deem it worth their time. Their attitude needs an

adjustment.

#16

she did oral... that is it.Pezking

Originally Posted by Mars

Absolutely, Stu. Motorola can't incur a financial loss from a radio they no longer support.Although in speaking with a lawyer yesterday, it was pointed out to me that by us supportingthese older "unsupported" radios, we could be slowing the sale of newer radios (ASTRO25,APX) which would cause them a financial loss. However, it's also reasonable to assume themembers of our site would not likely purchase a NEW, $5000+ radio from Moto. This bringsus back to the reason we're still using secondary-market radios to begin with. COST.

Moto should be grateful of our loyal following associated with their brand and products. Wego out of our way to assist customers who are otherwise being told to buzz off.


05-04-2012, 12:20 PM #17


8 of 14 1/06/2013 2:21 PM


Feb 2012Rota, Spain

2647

OK. In that case here is the before and after hex strings. This was from a MCS2000 800mhz

Model 3 35 watt radio current Flashcode 800004-000000-9. I was trying to make the

Flashcode 800008-000000-5. This is just for S&G's, personally I hate these radios after

working on them all the time. But I think it is cool to learn more about them than the service

manual lets on.

Before

S11F01F8000000000000C00022 10 19 16 12 19 7E F2 D8 20 FA 00 C2 44 00 00 48 40 18

40 53

S11F0214 00 80 00 C0 00 00 30 A0 06 80 00 04 00 00 00 19 00 00 00 00 00 00 00 00 00

00 00 00 17

After

S11F01F8000000000000C00022 10 19 16 12 19 7E F2 D8 24 FB 00 C2 44 00 00 48 40 18

40 4E

S11F0214 00 80 00 C0 00 00 30 A0 06 80 00 08 00 00 00 19 00 00 00 00 00 00 00 00 00

00 00 00 13

The green characters in the first one are the fields that need to be changed and the blue is

the checksum values. The bold characters are obviously after the change for FDB's and

checksum values.

MemberWB4JGI


05-04-2012, 12:46 PM


Dec 2011Avalon

930

S11F0214 00 80 00 C0 00 00 30 A0 06 80 00 09 00 00 00 19 00 00 00 00 00 00 00 00 00

00 00 00 12

This should be correct. You went down by 4 on the checksum, but the data went up by 5.

#18




9 of 14 1/06/2013 2:21 PM

05-04-2012, 01:39 PM


Feb 2012Rota, Spain

2647

OK. Sorry that last S-record I had, it seems that the radio that goes to is now gone. I

however have another one here that will not be going anywhere due to a bad RF board, so

this will be the new test S-Record. I already put the modified s-record in and the radio came

up Fail 01/82. So, obviously, I know something is wrong. But I can't seem to figure it out.

MCS2000 800mhz Model 2 35 watts firmware 7.71 Flashcode: 8000004-000000-9

Original S-Record

10 19 16 13 19 7E F2 D8 20 FA 00 C2 44 00 00 48 40 18 00 92

S11F0214 00 80 00 C0 00 00 30 A0 06 80 00 04 00 00 00 DA 00 00 00 00 00 00 00 00 00

00 00 00 56

Modified S-Record with goal of changing the Flashcode to 8000008-000000-x

10 19 16 13 19 7E F2 D8 24 FB 00 C2 44 00 00 48 40 18 00 8D

S11F0214 00 80 00 C0 00 00 30 A0 06 80 00 08 00 00 00 DA 00 00 00 00 00 00 00 00 00

00 00 00 52

#19

MemberWB4JGI


05-04-2012, 02:15 PM

Join Date:Posts:

Feb 20121,058

#20

T S - ModeratorNotarola


10 of 14 1/06/2013 2:21 PM

You still have the same math problem,

24-20 = 4

FB-FA = 1

----------

total = 5

so the checksum 04 + 5 = 9 not 8 Note double check the 51 checksum I just edited based

on changes from original to modified that you posted.

S11F0214 00 80 00 C0 00 00 30 A0 06 80 00 09 0 00 00 DA 00 00 00 00 00 00 00 00 00

00 00 00 51


05-04-2012, 02:31 PM


Feb 2012Rota, Spain

2647

I just made the changes and exported the file upon closer inspection Hex Workshop concurred

with the corrected checksum you provided. I'm using MTSX Lab version 2.00.01, opening the

s-record, reading into memory, writing the radio with no unpack option, and the radio gave

me a Fail 01/82 upon power up. I used the same method listed in the previous sentence and

shot the original S-Record back in it and it works normally with the same flashcode that I

started with.

If it matters I saved the original s-record as a .s19 extension and am using the same .s19

extension when attempting to write back to the radio.

#21

MemberWB4JGI


05-04-2012, 02:45 PM



2,581

You need to use MTSX Labtool R03.00.02, dated 10/24/1994. It's floating around in the wild.

#22



11 of 14 1/06/2013 2:21 PM





05-04-2012, 02:53 PM


Feb 2012Rota, Spain

2647

When I submitted my last post I seem to remember having that so I switched over to that

version and read/created the original S-record again and made the necessary changes. I then

exported into the .s19 format did a compare the values were there and concurred with the

math from previous posts. SO I'm thinking it's gonna work now, boy I was wrong. Using MTSX

Lab 3.00.02 I read the S-Record and forced it into the radio and wouldn't you know it Fail

01/82. I forced the original S-record back and it is back to normal now.

#23

MemberWB4JGI


05-04-2012, 03:14 PM


Dec 2011Avalon

930

No No No, I just figured it out, I wasn't looking at this correctly. My brain works with Bin files,

not srecs. You are not updating the end of block checksum thats why the Fl01/82.

10 19 16 13 19 7E F2 D8 24 FB 00 C2 44 00 00 48 40 18 00 8D

S11F0214 00 80 00 C0 00 00 30 A0 06 80 00 08 00 00 00 D1 00 00 00 00 00 00 00 00 00

00 00 00 52

This is the proper srec. I was not even paying attention to the fact you were changing the

flashcode as well as the FDB. Ignore my posts about the 8 being wrong.

#24




12 of 14 1/06/2013 2:21 PM

Quick Reply

Post Quick Reply Go Advanced Cancel

xts3000 403-470 mhz astro p25 9600 baud | Converting XTS3000 from IMBE to VSELP

05-04-2012, 03:54 PM


Feb 2012Rota, Spain

2647

I entered that correction of D1 and Hex Workshop calculated a 5B instead of a 52 for the

checksum. I tried it both ways with a 52 and a 5B the radio came up with Fail 01/82.

Time to go home and experiment with this next week sometime. Thanks for everyone's help

thus far. Sure is nice to have a board were this info can be shared at.

MemberWB4JGI

Originally Posted by

10 19 16 13 19 7E F2 D8 [COLOR=#008000

24 FB[/COLOR] 00 C2 44 00 00 48 40 18 00 8D

S11F0214 00 80 00 C0 00 00 30 A0 06 80 00 08 00 00 00 D1 00 00 00 00 00 00 00 00 00 0000 00 52


Page 1 of 2 1 2 Last

Quick Navigation Software Modification & Tweaking Top


13 of 14 1/06/2013 2:21 PM

MCS2000 Serial Number Change

Documents

Transcript of MCS2000 Serial Number Change