cp200 password bypass

[m-gerty]

One of our Rescue Squad members bought a cp200 that's password protected.It was programmed with what he needed at the time, but now he's in the squad and some stuff needs to be changed. The original owner has passed away and we don't know where he got the radio.
All that being said I went to batlabs and couldn't find a thing about it. I've heard about using a hex editor to change the code plug, but I can't figure how to upload the original code plug. When I connect it gets to about 81% then the password box appears. The Mot software comes with sample code plugs, I thought about trying to fill in the frq and pl tones and download to the radio. But I don't want to brick the radio.
I'm open for suggestions, and help.

 

[bravo14]

I tried a google search about Motorola cp200 password removal but couldn't find nothing expect software on ebay. If you have a Motorola shop you can call them see what they can do.

 

[SteveC0625]

One of our Rescue Squad members bought a cp200 that's password protected.It was programmed with what he needed at the time, but now he's in the squad and some stuff needs to be changed. The original owner has passed away and we don't know where he got the radio.
All that being said I went to batlabs and couldn't find a thing about it. I've heard about using a hex editor to change the code plug, but I can't figure how to upload the original code plug. When I connect it gets to about 81% then the password box appears. The Mot software comes with sample code plugs, I thought about trying to fill in the frq and pl tones and download to the radio. But I don't want to brick the radio.
I'm open for suggestions, and help.

If you have another CP200 with exactly the same model number, you should be able to clone the protected radio which should remove the password. Then you can reprogram as needed.

If you go to the batboard (not batlabs) and search there, I am pretty sure you will find your answer about hex editing the CPS.

 

[SD70MAC]

password hack

The password hack is in this tread on Batlabs. It was started as a Region hack ,but it does contain the info for most of the CPS versions.


Batboard • View topic - Commercial Series Region Hack


I done all my ProSeries & CommSeries CPS versions just in case I run into it.

 

[m-gerty]

The password hack is in this tread on Batlabs. It was started as a Region hack ,but it does contain the info for most of the CPS versions.


Batboard • View topic - Commercial Series Region Hack


I done all my ProSeries & CommSeries CPS versions just in case I run into it.

Are you saying that I 'll be changing the info in the CPS to ignore the password, and not changing the code plug?




If you have another CP200 with exactly the same model number, you should be able to clone the protected radio which should remove the password. Then you can reprogram as needed.

The closest I have to that is a cp200xls(?) and that won't work

 

[SteveC0625]

Are you saying that I 'll be changing the info in the CPS to ignore the password, and not changing the code plug?

That is correct. Once you modify the CPS, when it asks for the password, just hit <enter> and it will bypass the password allowing you to edit the codeplug, clear the password, and write back to the radio.





If you have another CP200 with exactly the same model number, you should be able to clone the protected radio which should remove the password. Then you can reprogram as needed.

The closest I have to that is a cp200xls(?) and that won't work

You did say that you had the sample code plugs from the install of the software. Find the one with exact same model number as the radio. Load the code plug and then clone to the radio.

 

[m-gerty]

Well I got a text editor and tried looking for the strings listed in the batboard posts. It turns out they are for older versions, I have r05.13,and I can't find any of the given strings there is another poster that asked for help on the same issue same ver and no help.I don't have access to the password protected radio this week to check if the sample codeplug is the same. I'll try that next week. Is there a possibility of bricking this radio by trying this?
I'm open for suggestions.

 

[SteveC0625]

Well I got a text editor and tried looking for the strings listed in the batboard posts. It turns out they are for older versions, I have r05.13,and I can't find any of the given strings there is another poster that asked for help on the same issue same ver and no help.I don't have access to the password protected radio this week to check if the sample codeplug is the same. I'll try that next week. Is there a possibility of bricking this radio by trying this?
I'm open for suggestions.

By trying which, the password hex edit or cloning a new code plug into the radio?

If you don't properly edit the .exe for the password bypass, you could certainly brick the radio.

Writing a new codeplug via the cloning option should not brick the radio.

FWIW, somewhere in that thread on the batboard is a hex string to search for in the CPS. That specific string only appears once in the entire file. Once you find that string you only have to change two characters and you are done. That should work, regardless of version.

 

[m-gerty]

By trying which, the password hex edit or cloning a new code plug into the radio?


I could've worded that better, I meant cloning. But the last thing I want to do is brick it.


If you don't properly edit the .exe for the password bypass, you could certainly brick the radio.

Writing a new codeplug via the cloning option should not brick the radio.

FWIW, somewhere in that thread on the batboard is a hex string to search for in the CPS. That specific string only appears once in the entire file. Once you find that string you only have to change two characters and you are done. That should work, regardless of version.

I searched all the strings listed in the posts concerning password bypass with the hex editor (Hexplorer) and coulldn't find any of them..Maybe I'm doing something wrong, tried putting the string in hex search and text search, no joy.

 

[62Truck]

It can be done. I have done it. It's a pita. And it took me a while to do it. What I would suggest. Take a similar radio. Program it with a password that will stand out. I use cuss words. Look where the offset is for that string and it should be the same on the other radio as long as its the same model ie being a cp200 with 16 channels and also making sure your using the ram part of the hex editor.


Sent from my iPhone using Tapatalk