Reversing XTS3000 CPS?

[farhan00]

The CPS for the XTS3000 only runs on Windows XP. Darn. So why not reverse the serial protocol?

My physical setup:
Win XP <--FTDI crossover to another FTDI --> Linux Box <--USB to Serial--> XTS3000

I set the CPS to point to COM2, which is the FTDI in the WinXP box. The Linux code should receive the data, and transmit it to the Linux box, which should then send that over to the XTS3000.

I wrote some C code on the Linux box that should transmit/logging data between the two parties. It seems to work for 30 seconds and is transferring data. Then suddenly fails. WHY???

Let me share my code and perhaps someone can give me some insights. Code here:
https://github.com/FarhansCode/serialsnooper/blob/master/snoop.c

You would run it as
./snoop /dev/ttyUSB0 /dev/ttyUSB1

Clearly data is transmitted back and forth, and then suddenly there's a non-descriptive "Unable to read radio" error.

Any ideas? This is my first real attempt at hardware reverse engineering.

 

[Project25_MASTR]

Runs in Windows 7, 8, and 10 without issues as long as it's a 33 bit architecture.

The software will physically run on 64 bit architecture, just won't communicate for reading/writing to the radio.

Motorola is pretty good at making their software just dependent enough so you can't use it with wine unlike everyone else's software.


Sent from my iPhone using Tapatalk

 

[farhan00]

Just starting out, I found that there's an initial handshake, where the CPS sends 0x01020040F7, which the radio mirrors back.

There's a slight delay, then the CPS sends over 0x0012010602, which again the radio mirrors back.

Then I found the CPS send 0xF51120000000D9 9 times, again the radio echos it back, followed by the CPS reporting that it was unable to read from the radio.

Ideas?

 

[Forts]

As W5PKY mentioned, I've had zero problems using Win 7, 8 or 10.

 

[com501]

Keep reverse engineering their software and you will be getting a letter from their attorneys, or a visit from DHS. You should keep this on the downlow. Besides, it (at everyone else has mentioned) works fine in current software.

 

[SCPD]

Just setup your pc to dual boot. Have Windows on one partition and Linux of the other just make sure the clean XP can't access the internet.. I kind of cheat, I use a WinXP virtual machine with Windows 7 64 bit. Just attach the USB to serial device in integration settings. That VM never sees the internet so there is no internet access for it. Never had a problem with any CPS but some of the newest CPS won't run on XP anymore. Much easier than reverse engineer Motorola's CPS. Even though Moto no longer supports XTS3000/Astro Sabre software, it's still their intellectual property. I'm sure they have some big bad attorneys down their in Chicago.

 

[farhan00]

Keep reverse engineering their software and you will be getting a letter from their attorneys, or a visit from DHS. You should keep this on the downlow. Besides, it (at everyone else has mentioned) works fine in current software.

um...is this not legal? You just freaked me out, quitting now.
Damn.