Description

Documents the codeplug format for the AnyTone AT-D168UV device.

Address	Element	Description
800000h	Channel banks	A sparse series of channel banks.
802000h	Channel extension banks	A series of channel extension banks corresponding to each encoded channel bank.
fc0800h	VFO channel A	The first VFO channel.
fc0840h	VFO channel B	The second VFO channel.
fc2800h	VFO A channel extension	Encodes additional channel information.
fc2840h	VFO B channel extension	Encodes additional channel information.
1000000h	Zone channel lists.
1040000h	Roaming channel bank	Encodes a bank of up to 250 roaming channels.
1042000h	Roaming channel bitmap
1042080h	Roaming zone bitmap
1043000h	Roaming zone bank	A collection of up to 64 roaming zones.
1080000h	Scan list banks
1640000h	Message linked list
1640800h	Message byte-map
2140000h	Message banks
2480000h	FM broadcast channel frequencies
2480200h	FM broadcast VFO frequency
2480210h	FM broadcast channel bitmap
2480220h	FM broadcast channel scan bitmap
24c0000h	5-Tone IDs
24c0c80h	5-Tone id bitmap
24c0d00h	5-Tone functions	Defines up to 16 functions, that can be triggered by a 5-tone id.
24c1000h	5-Tone settings
24c1080h	DTMF Settings
24c1100h	2-Tone Ids
24c1280h	2-Tone Id bitmap	Specifies, which 2-tone id is valid.
24c1290h	2-Tone Settings
24c1300h	Zone Bitmap Element
24c1320h	Radio Id Bitmap Element
24c1340h	Scan List Bitmap Element
24c1360h	Hidden zone bitmap
24c1400h	Alarm Settings
24c1440h	DMR Alarm Extension
24c1500h	Channel Bitmap Element
24c1700h	DMR encryption Keys
24c1800h	Unused data	This was the old DMR encryption key bank. Gets still allocated but is not used anymore.
24c2000h	Auto repeater offset frequency bank	Holds up to 250 offset frequencies for the auto-repeater feature.
24c2400h	2-Tone functions	Encodes up to 16 two-tone functions.
24c2600h	2-Tone function bitmap
24c4000h	AES encryption key bank
24c8000h	AES encryption key bitmap
2500000h	General Settings
2500100h	B channels	B channel.
2500500h	DTMF Ids	Encodes DTMF PTT ids.
2500600h	Boot Settings
2501000h	APRS settings
2501280h	DMR APRS message
2501400h	General Settings Extension
2502000h	GPS roaming zone bank	Encodes up to 32 GPS roaming zones.
2504800h	Fixed Location Names
2540000h	Zone Names
2580000h	Radio Ids
2582000h	Primary ID Settings
25c0000h	FM Quick Call Bank
25c0100h	Status Messages
25c0500h	Hot-Key Settings
25c0b00h	Status Message Bitmap Element
25c0b10h	Group List Bitmap Element
25c0c00h	ARC4 encryption keys
25c1c00h	ARC4 key bitmap
25c2000h	Unknown data
25c2c80h	Unknown data
2600000h	Valid contact indices	Some weird contact index map, containing the indices of up to 10000 valid contacts.
2640000h	Contact Bitmap Element
2680000h	Contact banks
2900000h	Analog Contact Index List
2900100h	Analog Contact ByteMap
2940000h	Analog Contacts
2980000h	Group List Bank
2cc0000h	QDC contact index map
2cc0100h	QDC contact bytemap
2d00000h	QDC contacts	A bank of up to 128 QDC1200 contacts.
4800000h	Contact Map

708 Channel banks v1.07done

Between 1 and 32 repetitions of Channel Bank.

A sparse series of channel banks.

709 Channel Bank v1.07done

Between 1 and 128 repetitions of Channel.

A single channel bank, holding up to 128 Channels.

710 Channel v1.07done

Element of size 40h.

Encodes a single FM or DMR channel.

RX Frequency

At address 0h: 32-bit bcd big-endian integer value (bcd8be).

Specifies the reception frequency.

Frequency is specified in 10Hz.

TX Frequency Offset

At address 4h: 32-bit bcd big-endian integer value (bcd8be).

Specifies the transmit frequency offset.

The frequency is stored in 10Hz. The offset direction is stored separately.

Repeater direction

At address 8h:7: Enumeration of size 0h:2, with 3 options. Specifies the offset direction for the repeater mode.

Value	Name	Description
0	Simplex	RX = TX Frequency
1	Positive	TX = RX + Offset
2	Negative	TX = RX - Offset

Bandwidth

At address 8h:5: Enumeration of size 0h:2, with 2 options. Specifies the bandwidth of the FM channel. DMR channels are always 12.5kHz wide.

Value	Name	Description
0	Narrow (12.5kHz)
1	Wide (25kHz)

Transmit power

At address 8h:3: Enumeration of size 0h:2, with 4 options. Specifies the transmit power of the channel.

Value	Name	Description
0	Low
1	Medium
2	High
3	Turbo

Channel mode

At address 8h:1: Enumeration of size 0h:2, with 4 options. Specifies the mode of the channel.

Value	Name	Description
0	FM
1	DMR
2	FM + DMR RX
3	DMR + FM RX

Enable talkaround TlkAr

At address 9h:7: boolean value. Default value 0h.

Call confirm

At address 9h:6: boolean value. Default value 0h.

Enable RX only RXO

At address 9h:5: boolean value. Default value 0h.

If enabled, no transmission is possible on this channel.

Swap RX/TX

At address 9h:4: boolean value. Default value 0h.

Swaps RX and TX frequencies.

Enable TX DCS

At address 9h:3: boolean value. Default value 0h.

Enable TX CTCSS

At address 9h:2: boolean value.

Enable RX DCS

At address 9h:1: boolean value. Default value 0h.

Enable RX CTCSS

At address 9h:0: boolean value. Default value 0h.

TX Tone CTCSS

At address ah: Enumeration of size 1h, with 52 options.

Value	Name	Description
0	62.5 Hz
1	67.0 Hz
2	69.3 Hz
3	71.9 Hz
4	74.4 Hz
5	77.0 Hz
6	79.7 Hz
7	82.5 Hz
8	85.4 Hz
9	88.5 Hz
10	91.5 Hz
11	94.8 Hz
12	97.4 Hz
13	100.0 Hz
14	103.5 Hz
15	107.2 Hz
16	110.9 Hz
17	114.8 Hz
18	118.8 Hz
19	123.0 Hz
20	127.3 Hz
21	131.8 Hz
22	136.5 Hz
23	141.3 Hz
24	146.2 Hz
25	151.4 Hz
26	156.7 Hz
27	159.8 Hz
28	162.2 Hz
29	165.5 Hz
30	167.9 Hz
31	171.3 Hz
32	173.8 Hz
33	177.3 Hz
34	179.9 Hz
35	183.5 Hz
36	186.2 Hz
37	189.9 Hz
38	192.8 Hz
39	196.6 Hz
40	199.5 Hz
41	203.5 Hz
42	206.5 Hz
43	210.7 Hz
44	218.1 Hz
45	225.7 Hz
46	229.1 Hz
47	233.6 Hz
48	241.8 Hz
49	250.3 Hz
50	254.1 Hz
51	Custom

RX Tone CTCSS

At address bh: Enumeration of size 1h, with 52 options.

Value	Name	Description
0	62.5 Hz
1	67.0 Hz
2	69.3 Hz
3	71.9 Hz
4	74.4 Hz
5	77.0 Hz
6	79.7 Hz
7	82.5 Hz
8	85.4 Hz
9	88.5 Hz
10	91.5 Hz
11	94.8 Hz
12	97.4 Hz
13	100.0 Hz
14	103.5 Hz
15	107.2 Hz
16	110.9 Hz
17	114.8 Hz
18	118.8 Hz
19	123.0 Hz
20	127.3 Hz
21	131.8 Hz
22	136.5 Hz
23	141.3 Hz
24	146.2 Hz
25	151.4 Hz
26	156.7 Hz
27	159.8 Hz
28	162.2 Hz
29	165.5 Hz
30	167.9 Hz
31	171.3 Hz
32	173.8 Hz
33	177.3 Hz
34	179.9 Hz
35	183.5 Hz
36	186.2 Hz
37	189.9 Hz
38	192.8 Hz
39	196.6 Hz
40	199.5 Hz
41	203.5 Hz
42	206.5 Hz
43	210.7 Hz
44	218.1 Hz
45	225.7 Hz
46	229.1 Hz
47	233.6 Hz
48	241.8 Hz
49	250.3 Hz
50	254.1 Hz
51	Custom

TX DCS code

At address ch: 16-bit unsigned little-endian integer value (uint16le). Default value 0h.

Encodes the DCS code in a complex way.

The least significant 9 bits encode the binary DCS code. The 9th bit encodes the inversion flag.

RX DCS code

At address eh: 16-bit unsigned little-endian integer value (uint16le). Default value 0h.

Encodes the DCS code in a complex way.

The least significant 9 bits encode the binary DCS code. The 9th bit encodes the inversion flag.

Custom CTCSS frequency

At address 10h: 16-bit signed little-endian integer value (int16le). Default value 0h.

Specifies a custom CTCSS frequency in 0.1Hz.

Two-tone decode index

At address 12h: 16-bit unsigned little-endian integer value (uint16le). Default value 0h.

Specifies the two-tone decode index.

Transmit contact index

At address 14h: 32-bit unsigned little-endian integer value (uint32le). Default value 0h.

Contact index, 0-based.

Radio ID index

At address 18h: 8-bit unsigned integer value (uint8). Default value 0h.

Unused data

At address 19h:7: Unused data of size 0h:6:

FM PTT ID transmission mode TX PTT ID

At address 19h:1: Enumeration of size 0h:2, with 4 options. Specifies when to transmit the FM PTT id.

Value	Name	Description
0	Off
1	Start
2	End
3	Both

Optional Signaling

At address 1ah:7: Enumeration of size 0h:4, with 5 options.

Value	Name	Description
0	Off
1	DTMF
2	two-tone
3	five-tone
4	QDC1200

Unused data

At address 1ah:3: Unused data of size 0h:2:

Admit Criterium

At address 1ah:1: Enumeration of size 0h:2, with 4 options. This is a mess. Similar admid criteria for FM and DMR are encoded differently. E.g., channel free and different CC/tone.

Value	Name	Description
0	Always
1	Channel Free	DMR: channel Free, FM: different CTCSS/DCS tone.
2	Different color code	DMR: different CC; FM: channel free
3	Same color code

Scan list index

At address 1bh: 8-bit unsigned integer value (uint8). Default value 0h.

Scan list index, 0-based.

None = 0xff.

Group List index

At address 1ch: 8-bit unsigned integer value (uint8). Default value ffh.

Specifies the group list index.

A 0-based index of the group list. If not set, 0xff.

Two-tone Id

At address 1dh: 8-bit unsigned integer value (uint8).

Five-tone Id

At address 1eh: 8-bit unsigned integer value (uint8).

DTMF Id

At address 1fh: 8-bit unsigned integer value (uint8).

Color code

At address 20h: 8-bit unsigned integer value (uint8).

Specifies the RX color code.

Enable Lone Worker LWk

At address 21h:7: boolean value. Default value 0h.

Unused data

At address 21h:6: Unused data of size 0h:1:

Enable APRS RX APRSr

At address 21h:5: boolean value.

Ignore time-slot

At address 21h:4: boolean value. Valid values between 0h and 1h, with default value 0h.

If enabled, the time-slot setting is ignored. the radio will receive on both time-slots.

DCMA mode

At address 21h:3: Enumeration of size 0h:2, with 3 options.

Value	Name	Description
0	Off
1	DCMA Double Slot
2	DCMA Sinlge Slot

Enable SMS Confirmation SMS ACK

At address 21h:1: boolean value. Default value 0h.

Time Slot

At address 21h:0: Enumeration of size 0h:1, with 2 options.

Value	Name	Description
0	Time Slot 1
1	Time Slot 2

AES encryption key index

At address 22h: 8-bit unsigned integer value (uint8).

Name

At address 23h: ASCII string of length (up to) 16 chars, 00h-padded.

Pad Byte

At address 33h: Unused data of size 1h: 00

DMR CRC Ignore nCRC

At address 34h:7: boolean value. Valid values between 0h and 1h, with default value 0h.

Enable noise reduction NR

At address 34h:6: boolean value. Valid values between 0h and 1h, with default value 0h.

in the original CPS.

Auto-switch time-slot

At address 34h:5: boolean value. Valid values between 0h and 1h, with default value 0h.

If enabled and the current time-slot is occupied, the radio will transmit on the other time-slot unless that one is busy too.

Auto scan

At address 34h:4: boolean value. Default value 0h.

Disable data ACK dACK

At address 34h:3: boolean value.

Exclude channel from roaming

At address 34h:2: boolean value. Default value 0h.

Enable Simplex Smplx

At address 34h:1: boolean value. Default value 0h.

Enables the simplex mode.

That is, RX = TX frequency.

Enable ranging Rngng

At address 34h:0: boolean value.

APRS Type

At address 35h: Enumeration of size 1h, with 3 options.

Value	Name	Description
0	None
1	FM ARPS
2	DMR APRS

FM APRS PTT mode

At address 36h: Enumeration of size 1h, with 2 options.

Value	Name	Description
0	Off
1	On

DMR APRS PTT mode

At address 37h: Enumeration of size 1h, with 3 options.

Value	Name	Description
0	Off
1	Start of transmission
2	End of transmission

DMR APRS channel index

At address 38h: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the DMR APRS channel setting index. A value in [0,7].

Frequency correction

At address 39h: 8-bit signed integer value (int8).

Specifies the frequency correction in multiples of 10Hz.

DMR Encryption Key Index

At address 3ah: 8-bit unsigned integer value (uint8). Valid values between 0h and fh, with default value 0h.

Specifies the DMR (basic) encryption key index +1.

That is, 0=off, 1=index 0, ...

Unused data

At address 3bh:7: Unused data of size 0h:2:

Encryption type CrypType

At address 3bh:5: Enumeration of size 0h:1, with 2 options. Specifies the encryption type.

Value	Name	Description
0	AES
1	ARC4

Send talker alias Send TalkAl

At address 3bh:4: boolean value. Default value 0h.

Unused data

At address 3bh:3: Unused data of size 0h:1:

SMS forbid

At address 3bh:2: boolean value.

Random Key

At address 3bh:1: boolean value.

Multiple Keys

At address 3bh:0: boolean value.

FM APRS frequency index

At address 3ch: 8-bit unsigned integer value (uint8). Default value 0h.

A value in range [0,7].

ARC4 key index

At address 3dh: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the key index for ARC4 encryption.

This index is idx+1, that is 0=Off, 1=key 0, 2 = key 1, ...

FM Scambler

At address 3eh: Enumeration of size 1h, with 13 options.

Value	Name	Description
0	Off
1	3.3k
2	3.2k
3	3.1k
4	3.0k
5	2.9k
6	2.8k
7	2.7k
8	2.6k
9	2.5k
10	4.095k
11	3.458k
12	Custom

Custom Scrambler

At address 3fh: Enumeration of size 1h, with 29 options.

Value	Name	Description
0	1.3k
1	1.4k
2	1.5k
3	1.6k
4	1.7k
5	1.8k
6	1.9k
7	2.0k
8	2.1k
9	2.2k
10	2.3k
11	2.4k
12	2.5k
13	2.6k
14	2.7k
15	2.8k
16	2.9k
17	3.0k
18	3.1k
19	3.2k
20	3.3k
21	3.4k
22	3.5k
23	3.6k
24	3.7k
25	3.8k
26	3.9k
27	4.0k
28	4.1k

711 Channel extension banks v1.07done

Between 1 and 32 repetitions of Channel extension bank.

A series of channel extension banks corresponding to each encoded channel bank.

712 Channel extension bank v1.07done

Between 1 and 128 repetitions of Channel extension.

Encodes several channel extensions corresponding to each encoded channel.

713 Channel extension v1.07done

Element of size 40h.

Encodes additional channel information.

5 Tone PTT ID index BOT

At address 0h: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the index of the begin-of-transmission 5 tone PTT ID to send.

5 Tone PTT ID index EOT

At address 1h: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the index of the 5 tone end-of-transmission PTT ID to send.

QDC1200 Index

At address 2h: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the PTT ID index +1.

That is, 0=off, 1=index 0, ...

TX color code TX CC

At address 3h: 8-bit unsigned integer value (uint8). Default value 1h.

Sets the transmit color code.

Usually, this should be equal to the RX color code.

Unused data

At address 4h: Unused data of size 3ch:

714 VFO channel A v1.07done

Element at address fc0800h of size 40h.

The first VFO channel.

RX Frequency

At address 0h: 32-bit bcd big-endian integer value (bcd8be).

Specifies the reception frequency.

Frequency is specified in 10Hz.

TX Frequency Offset

At address 4h: 32-bit bcd big-endian integer value (bcd8be).

Specifies the transmit frequency offset.

The frequency is stored in 10Hz. The offset direction is stored separately.

Repeater direction

At address 8h:7: Enumeration of size 0h:2, with 3 options. Specifies the offset direction for the repeater mode.

Value	Name	Description
0	Simplex	RX = TX Frequency
1	Positive	TX = RX + Offset
2	Negative	TX = RX - Offset

Bandwidth

At address 8h:5: Enumeration of size 0h:2, with 2 options. Specifies the bandwidth of the FM channel. DMR channels are always 12.5kHz wide.

Value	Name	Description
0	Narrow (12.5kHz)
1	Wide (25kHz)

Transmit power

At address 8h:3: Enumeration of size 0h:2, with 4 options. Specifies the transmit power of the channel.

Value	Name	Description
0	Low
1	Medium
2	High
3	Turbo

Channel mode

At address 8h:1: Enumeration of size 0h:2, with 4 options. Specifies the mode of the channel.

Value	Name	Description
0	FM
1	DMR
2	FM + DMR RX
3	DMR + FM RX

Enable talkaround TlkAr

At address 9h:7: boolean value. Default value 0h.

Call confirm

At address 9h:6: boolean value. Default value 0h.

Enable RX only RXO

At address 9h:5: boolean value. Default value 0h.

If enabled, no transmission is possible on this channel.

Swap RX/TX

At address 9h:4: boolean value. Default value 0h.

Swaps RX and TX frequencies.

Enable TX DCS

At address 9h:3: boolean value. Default value 0h.

Enable TX CTCSS

At address 9h:2: boolean value.

Enable RX DCS

At address 9h:1: boolean value. Default value 0h.

Enable RX CTCSS

At address 9h:0: boolean value. Default value 0h.

TX Tone CTCSS

At address ah: Enumeration of size 1h, with 52 options.

Value	Name	Description
0	62.5 Hz
1	67.0 Hz
2	69.3 Hz
3	71.9 Hz
4	74.4 Hz
5	77.0 Hz
6	79.7 Hz
7	82.5 Hz
8	85.4 Hz
9	88.5 Hz
10	91.5 Hz
11	94.8 Hz
12	97.4 Hz
13	100.0 Hz
14	103.5 Hz
15	107.2 Hz
16	110.9 Hz
17	114.8 Hz
18	118.8 Hz
19	123.0 Hz
20	127.3 Hz
21	131.8 Hz
22	136.5 Hz
23	141.3 Hz
24	146.2 Hz
25	151.4 Hz
26	156.7 Hz
27	159.8 Hz
28	162.2 Hz
29	165.5 Hz
30	167.9 Hz
31	171.3 Hz
32	173.8 Hz
33	177.3 Hz
34	179.9 Hz
35	183.5 Hz
36	186.2 Hz
37	189.9 Hz
38	192.8 Hz
39	196.6 Hz
40	199.5 Hz
41	203.5 Hz
42	206.5 Hz
43	210.7 Hz
44	218.1 Hz
45	225.7 Hz
46	229.1 Hz
47	233.6 Hz
48	241.8 Hz
49	250.3 Hz
50	254.1 Hz
51	Custom

RX Tone CTCSS

At address bh: Enumeration of size 1h, with 52 options.

Value	Name	Description
0	62.5 Hz
1	67.0 Hz
2	69.3 Hz
3	71.9 Hz
4	74.4 Hz
5	77.0 Hz
6	79.7 Hz
7	82.5 Hz
8	85.4 Hz
9	88.5 Hz
10	91.5 Hz
11	94.8 Hz
12	97.4 Hz
13	100.0 Hz
14	103.5 Hz
15	107.2 Hz
16	110.9 Hz
17	114.8 Hz
18	118.8 Hz
19	123.0 Hz
20	127.3 Hz
21	131.8 Hz
22	136.5 Hz
23	141.3 Hz
24	146.2 Hz
25	151.4 Hz
26	156.7 Hz
27	159.8 Hz
28	162.2 Hz
29	165.5 Hz
30	167.9 Hz
31	171.3 Hz
32	173.8 Hz
33	177.3 Hz
34	179.9 Hz
35	183.5 Hz
36	186.2 Hz
37	189.9 Hz
38	192.8 Hz
39	196.6 Hz
40	199.5 Hz
41	203.5 Hz
42	206.5 Hz
43	210.7 Hz
44	218.1 Hz
45	225.7 Hz
46	229.1 Hz
47	233.6 Hz
48	241.8 Hz
49	250.3 Hz
50	254.1 Hz
51	Custom

TX DCS code

At address ch: 16-bit unsigned little-endian integer value (uint16le). Default value 0h.

Encodes the DCS code in a complex way.

The least significant 9 bits encode the binary DCS code. The 9th bit encodes the inversion flag.

RX DCS code

At address eh: 16-bit unsigned little-endian integer value (uint16le). Default value 0h.

Encodes the DCS code in a complex way.

The least significant 9 bits encode the binary DCS code. The 9th bit encodes the inversion flag.

Custom CTCSS frequency

At address 10h: 16-bit signed little-endian integer value (int16le). Default value 0h.

Specifies a custom CTCSS frequency in 0.1Hz.

Two-tone decode index

At address 12h: 16-bit unsigned little-endian integer value (uint16le). Default value 0h.

Specifies the two-tone decode index.

Transmit contact index

At address 14h: 32-bit unsigned little-endian integer value (uint32le). Default value 0h.

Contact index, 0-based.

Radio ID index

At address 18h: 8-bit unsigned integer value (uint8). Default value 0h.

Unused data

At address 19h:7: Unused data of size 0h:6:

FM PTT ID transmission mode TX PTT ID

At address 19h:1: Enumeration of size 0h:2, with 4 options. Specifies when to transmit the FM PTT id.

Value	Name	Description
0	Off
1	Start
2	End
3	Both

Optional Signaling

At address 1ah:7: Enumeration of size 0h:4, with 5 options.

Value	Name	Description
0	Off
1	DTMF
2	two-tone
3	five-tone
4	QDC1200

Unused data

At address 1ah:3: Unused data of size 0h:2:

Admit Criterium

At address 1ah:1: Enumeration of size 0h:2, with 4 options. This is a mess. Similar admid criteria for FM and DMR are encoded differently. E.g., channel free and different CC/tone.

Value	Name	Description
0	Always
1	Channel Free	DMR: channel Free, FM: different CTCSS/DCS tone.
2	Different color code	DMR: different CC; FM: channel free
3	Same color code

Scan list index

At address 1bh: 8-bit unsigned integer value (uint8). Default value 0h.

Scan list index, 0-based.

None = 0xff.

Group List index

At address 1ch: 8-bit unsigned integer value (uint8). Default value ffh.

Specifies the group list index.

A 0-based index of the group list. If not set, 0xff.

Two-tone Id

At address 1dh: 8-bit unsigned integer value (uint8).

Five-tone Id

At address 1eh: 8-bit unsigned integer value (uint8).

DTMF Id

At address 1fh: 8-bit unsigned integer value (uint8).

Color code

At address 20h: 8-bit unsigned integer value (uint8).

Specifies the RX color code.

Enable Lone Worker LWk

At address 21h:7: boolean value. Default value 0h.

Unused data

At address 21h:6: Unused data of size 0h:1:

Enable APRS RX APRSr

At address 21h:5: boolean value.

Ignore time-slot

At address 21h:4: boolean value. Valid values between 0h and 1h, with default value 0h.

If enabled, the time-slot setting is ignored. the radio will receive on both time-slots.

DCMA mode

At address 21h:3: Enumeration of size 0h:2, with 3 options.

Value	Name	Description
0	Off
1	DCMA Double Slot
2	DCMA Sinlge Slot

Enable SMS Confirmation SMS ACK

At address 21h:1: boolean value. Default value 0h.

Time Slot

At address 21h:0: Enumeration of size 0h:1, with 2 options.

Value	Name	Description
0	Time Slot 1
1	Time Slot 2

AES encryption key index

At address 22h: 8-bit unsigned integer value (uint8).

Name

At address 23h: ASCII string of length (up to) 16 chars, 00h-padded.

Pad Byte

At address 33h: Unused data of size 1h: 00

DMR CRC Ignore nCRC

At address 34h:7: boolean value. Valid values between 0h and 1h, with default value 0h.

Enable noise reduction NR

At address 34h:6: boolean value. Valid values between 0h and 1h, with default value 0h.

in the original CPS.

Auto-switch time-slot

At address 34h:5: boolean value. Valid values between 0h and 1h, with default value 0h.

If enabled and the current time-slot is occupied, the radio will transmit on the other time-slot unless that one is busy too.

Auto scan

At address 34h:4: boolean value. Default value 0h.

Disable data ACK dACK

At address 34h:3: boolean value.

Exclude channel from roaming

At address 34h:2: boolean value. Default value 0h.

Enable Simplex Smplx

At address 34h:1: boolean value. Default value 0h.

Enables the simplex mode.

That is, RX = TX frequency.

Enable ranging Rngng

At address 34h:0: boolean value.

APRS Type

At address 35h: Enumeration of size 1h, with 3 options.

Value	Name	Description
0	None
1	FM ARPS
2	DMR APRS

FM APRS PTT mode

At address 36h: Enumeration of size 1h, with 2 options.

Value	Name	Description
0	Off
1	On

DMR APRS PTT mode

At address 37h: Enumeration of size 1h, with 3 options.

Value	Name	Description
0	Off
1	Start of transmission
2	End of transmission

DMR APRS channel index

At address 38h: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the DMR APRS channel setting index. A value in [0,7].

Frequency correction

At address 39h: 8-bit signed integer value (int8).

Specifies the frequency correction in multiples of 10Hz.

DMR Encryption Key Index

At address 3ah: 8-bit unsigned integer value (uint8). Valid values between 0h and fh, with default value 0h.

Specifies the DMR (basic) encryption key index +1.

That is, 0=off, 1=index 0, ...

Unused data

At address 3bh:7: Unused data of size 0h:2:

Encryption type CrypType

At address 3bh:5: Enumeration of size 0h:1, with 2 options. Specifies the encryption type.

Value	Name	Description
0	AES
1	ARC4

Send talker alias Send TalkAl

At address 3bh:4: boolean value. Default value 0h.

Unused data

At address 3bh:3: Unused data of size 0h:1:

SMS forbid

At address 3bh:2: boolean value.

Random Key

At address 3bh:1: boolean value.

Multiple Keys

At address 3bh:0: boolean value.

FM APRS frequency index

At address 3ch: 8-bit unsigned integer value (uint8). Default value 0h.

A value in range [0,7].

ARC4 key index

At address 3dh: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the key index for ARC4 encryption.

This index is idx+1, that is 0=Off, 1=key 0, 2 = key 1, ...

FM Scambler

At address 3eh: Enumeration of size 1h, with 13 options.

Value	Name	Description
0	Off
1	3.3k
2	3.2k
3	3.1k
4	3.0k
5	2.9k
6	2.8k
7	2.7k
8	2.6k
9	2.5k
10	4.095k
11	3.458k
12	Custom

Custom Scrambler

At address 3fh: Enumeration of size 1h, with 29 options.

Value	Name	Description
0	1.3k
1	1.4k
2	1.5k
3	1.6k
4	1.7k
5	1.8k
6	1.9k
7	2.0k
8	2.1k
9	2.2k
10	2.3k
11	2.4k
12	2.5k
13	2.6k
14	2.7k
15	2.8k
16	2.9k
17	3.0k
18	3.1k
19	3.2k
20	3.3k
21	3.4k
22	3.5k
23	3.6k
24	3.7k
25	3.8k
26	3.9k
27	4.0k
28	4.1k

715 VFO channel B v1.07done

Element at address fc0840h of size 40h.

The second VFO channel.

RX Frequency

At address 0h: 32-bit bcd big-endian integer value (bcd8be).

Specifies the reception frequency.

Frequency is specified in 10Hz.

TX Frequency Offset

At address 4h: 32-bit bcd big-endian integer value (bcd8be).

Specifies the transmit frequency offset.

The frequency is stored in 10Hz. The offset direction is stored separately.

Repeater direction

At address 8h:7: Enumeration of size 0h:2, with 3 options. Specifies the offset direction for the repeater mode.

Value	Name	Description
0	Simplex	RX = TX Frequency
1	Positive	TX = RX + Offset
2	Negative	TX = RX - Offset

Bandwidth

At address 8h:5: Enumeration of size 0h:2, with 2 options. Specifies the bandwidth of the FM channel. DMR channels are always 12.5kHz wide.

Value	Name	Description
0	Narrow (12.5kHz)
1	Wide (25kHz)

Transmit power

At address 8h:3: Enumeration of size 0h:2, with 4 options. Specifies the transmit power of the channel.

Value	Name	Description
0	Low
1	Medium
2	High
3	Turbo

Channel mode

At address 8h:1: Enumeration of size 0h:2, with 4 options. Specifies the mode of the channel.

Value	Name	Description
0	FM
1	DMR
2	FM + DMR RX
3	DMR + FM RX

Enable talkaround TlkAr

At address 9h:7: boolean value. Default value 0h.

Call confirm

At address 9h:6: boolean value. Default value 0h.

Enable RX only RXO

At address 9h:5: boolean value. Default value 0h.

If enabled, no transmission is possible on this channel.

Swap RX/TX

At address 9h:4: boolean value. Default value 0h.

Swaps RX and TX frequencies.

Enable TX DCS

At address 9h:3: boolean value. Default value 0h.

Enable TX CTCSS

At address 9h:2: boolean value.

Enable RX DCS

At address 9h:1: boolean value. Default value 0h.

Enable RX CTCSS

At address 9h:0: boolean value. Default value 0h.

TX Tone CTCSS

At address ah: Enumeration of size 1h, with 52 options.

Value	Name	Description
0	62.5 Hz
1	67.0 Hz
2	69.3 Hz
3	71.9 Hz
4	74.4 Hz
5	77.0 Hz
6	79.7 Hz
7	82.5 Hz
8	85.4 Hz
9	88.5 Hz
10	91.5 Hz
11	94.8 Hz
12	97.4 Hz
13	100.0 Hz
14	103.5 Hz
15	107.2 Hz
16	110.9 Hz
17	114.8 Hz
18	118.8 Hz
19	123.0 Hz
20	127.3 Hz
21	131.8 Hz
22	136.5 Hz
23	141.3 Hz
24	146.2 Hz
25	151.4 Hz
26	156.7 Hz
27	159.8 Hz
28	162.2 Hz
29	165.5 Hz
30	167.9 Hz
31	171.3 Hz
32	173.8 Hz
33	177.3 Hz
34	179.9 Hz
35	183.5 Hz
36	186.2 Hz
37	189.9 Hz
38	192.8 Hz
39	196.6 Hz
40	199.5 Hz
41	203.5 Hz
42	206.5 Hz
43	210.7 Hz
44	218.1 Hz
45	225.7 Hz
46	229.1 Hz
47	233.6 Hz
48	241.8 Hz
49	250.3 Hz
50	254.1 Hz
51	Custom

RX Tone CTCSS

At address bh: Enumeration of size 1h, with 52 options.

Value	Name	Description
0	62.5 Hz
1	67.0 Hz
2	69.3 Hz
3	71.9 Hz
4	74.4 Hz
5	77.0 Hz
6	79.7 Hz
7	82.5 Hz
8	85.4 Hz
9	88.5 Hz
10	91.5 Hz
11	94.8 Hz
12	97.4 Hz
13	100.0 Hz
14	103.5 Hz
15	107.2 Hz
16	110.9 Hz
17	114.8 Hz
18	118.8 Hz
19	123.0 Hz
20	127.3 Hz
21	131.8 Hz
22	136.5 Hz
23	141.3 Hz
24	146.2 Hz
25	151.4 Hz
26	156.7 Hz
27	159.8 Hz
28	162.2 Hz
29	165.5 Hz
30	167.9 Hz
31	171.3 Hz
32	173.8 Hz
33	177.3 Hz
34	179.9 Hz
35	183.5 Hz
36	186.2 Hz
37	189.9 Hz
38	192.8 Hz
39	196.6 Hz
40	199.5 Hz
41	203.5 Hz
42	206.5 Hz
43	210.7 Hz
44	218.1 Hz
45	225.7 Hz
46	229.1 Hz
47	233.6 Hz
48	241.8 Hz
49	250.3 Hz
50	254.1 Hz
51	Custom

TX DCS code

At address ch: 16-bit unsigned little-endian integer value (uint16le). Default value 0h.

Encodes the DCS code in a complex way.

The least significant 9 bits encode the binary DCS code. The 9th bit encodes the inversion flag.

RX DCS code

At address eh: 16-bit unsigned little-endian integer value (uint16le). Default value 0h.

Encodes the DCS code in a complex way.

The least significant 9 bits encode the binary DCS code. The 9th bit encodes the inversion flag.

Custom CTCSS frequency

At address 10h: 16-bit signed little-endian integer value (int16le). Default value 0h.

Specifies a custom CTCSS frequency in 0.1Hz.

Two-tone decode index

At address 12h: 16-bit unsigned little-endian integer value (uint16le). Default value 0h.

Specifies the two-tone decode index.

Transmit contact index

At address 14h: 32-bit unsigned little-endian integer value (uint32le). Default value 0h.

Contact index, 0-based.

Radio ID index

At address 18h: 8-bit unsigned integer value (uint8). Default value 0h.

Unused data

At address 19h:7: Unused data of size 0h:6:

FM PTT ID transmission mode TX PTT ID

At address 19h:1: Enumeration of size 0h:2, with 4 options. Specifies when to transmit the FM PTT id.

Value	Name	Description
0	Off
1	Start
2	End
3	Both

Optional Signaling

At address 1ah:7: Enumeration of size 0h:4, with 5 options.

Value	Name	Description
0	Off
1	DTMF
2	two-tone
3	five-tone
4	QDC1200

Unused data

At address 1ah:3: Unused data of size 0h:2:

Admit Criterium

At address 1ah:1: Enumeration of size 0h:2, with 4 options. This is a mess. Similar admid criteria for FM and DMR are encoded differently. E.g., channel free and different CC/tone.

Value	Name	Description
0	Always
1	Channel Free	DMR: channel Free, FM: different CTCSS/DCS tone.
2	Different color code	DMR: different CC; FM: channel free
3	Same color code

Scan list index

At address 1bh: 8-bit unsigned integer value (uint8). Default value 0h.

Scan list index, 0-based.

None = 0xff.

Group List index

At address 1ch: 8-bit unsigned integer value (uint8). Default value ffh.

Specifies the group list index.

A 0-based index of the group list. If not set, 0xff.

Two-tone Id

At address 1dh: 8-bit unsigned integer value (uint8).

Five-tone Id

At address 1eh: 8-bit unsigned integer value (uint8).

DTMF Id

At address 1fh: 8-bit unsigned integer value (uint8).

Color code

At address 20h: 8-bit unsigned integer value (uint8).

Specifies the RX color code.

Enable Lone Worker LWk

At address 21h:7: boolean value. Default value 0h.

Unused data

At address 21h:6: Unused data of size 0h:1:

Enable APRS RX APRSr

At address 21h:5: boolean value.

Ignore time-slot

At address 21h:4: boolean value. Valid values between 0h and 1h, with default value 0h.

If enabled, the time-slot setting is ignored. the radio will receive on both time-slots.

DCMA mode

At address 21h:3: Enumeration of size 0h:2, with 3 options.

Value	Name	Description
0	Off
1	DCMA Double Slot
2	DCMA Sinlge Slot

Enable SMS Confirmation SMS ACK

At address 21h:1: boolean value. Default value 0h.

Time Slot

At address 21h:0: Enumeration of size 0h:1, with 2 options.

Value	Name	Description
0	Time Slot 1
1	Time Slot 2

AES encryption key index

At address 22h: 8-bit unsigned integer value (uint8).

Name

At address 23h: ASCII string of length (up to) 16 chars, 00h-padded.

Pad Byte

At address 33h: Unused data of size 1h: 00

DMR CRC Ignore nCRC

At address 34h:7: boolean value. Valid values between 0h and 1h, with default value 0h.

Enable noise reduction NR

At address 34h:6: boolean value. Valid values between 0h and 1h, with default value 0h.

in the original CPS.

Auto-switch time-slot

At address 34h:5: boolean value. Valid values between 0h and 1h, with default value 0h.

If enabled and the current time-slot is occupied, the radio will transmit on the other time-slot unless that one is busy too.

Auto scan

At address 34h:4: boolean value. Default value 0h.

Disable data ACK dACK

At address 34h:3: boolean value.

Exclude channel from roaming

At address 34h:2: boolean value. Default value 0h.

Enable Simplex Smplx

At address 34h:1: boolean value. Default value 0h.

Enables the simplex mode.

That is, RX = TX frequency.

Enable ranging Rngng

At address 34h:0: boolean value.

APRS Type

At address 35h: Enumeration of size 1h, with 3 options.

Value	Name	Description
0	None
1	FM ARPS
2	DMR APRS

FM APRS PTT mode

At address 36h: Enumeration of size 1h, with 2 options.

Value	Name	Description
0	Off
1	On

DMR APRS PTT mode

At address 37h: Enumeration of size 1h, with 3 options.

Value	Name	Description
0	Off
1	Start of transmission
2	End of transmission

DMR APRS channel index

At address 38h: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the DMR APRS channel setting index. A value in [0,7].

Frequency correction

At address 39h: 8-bit signed integer value (int8).

Specifies the frequency correction in multiples of 10Hz.

DMR Encryption Key Index

At address 3ah: 8-bit unsigned integer value (uint8). Valid values between 0h and fh, with default value 0h.

Specifies the DMR (basic) encryption key index +1.

That is, 0=off, 1=index 0, ...

Unused data

At address 3bh:7: Unused data of size 0h:2:

Encryption type CrypType

At address 3bh:5: Enumeration of size 0h:1, with 2 options. Specifies the encryption type.

Value	Name	Description
0	AES
1	ARC4

Send talker alias Send TalkAl

At address 3bh:4: boolean value. Default value 0h.

Unused data

At address 3bh:3: Unused data of size 0h:1:

SMS forbid

At address 3bh:2: boolean value.

Random Key

At address 3bh:1: boolean value.

Multiple Keys

At address 3bh:0: boolean value.

FM APRS frequency index

At address 3ch: 8-bit unsigned integer value (uint8). Default value 0h.

A value in range [0,7].

ARC4 key index

At address 3dh: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the key index for ARC4 encryption.

This index is idx+1, that is 0=Off, 1=key 0, 2 = key 1, ...

FM Scambler

At address 3eh: Enumeration of size 1h, with 13 options.

Value	Name	Description
0	Off
1	3.3k
2	3.2k
3	3.1k
4	3.0k
5	2.9k
6	2.8k
7	2.7k
8	2.6k
9	2.5k
10	4.095k
11	3.458k
12	Custom

Custom Scrambler

At address 3fh: Enumeration of size 1h, with 29 options.

Value	Name	Description
0	1.3k
1	1.4k
2	1.5k
3	1.6k
4	1.7k
5	1.8k
6	1.9k
7	2.0k
8	2.1k
9	2.2k
10	2.3k
11	2.4k
12	2.5k
13	2.6k
14	2.7k
15	2.8k
16	2.9k
17	3.0k
18	3.1k
19	3.2k
20	3.3k
21	3.4k
22	3.5k
23	3.6k
24	3.7k
25	3.8k
26	3.9k
27	4.0k
28	4.1k

716 VFO A channel extension v1.07done

Element at address fc2800h of size 40h.

Encodes additional channel information.

5 Tone PTT ID index BOT

At address 0h: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the index of the begin-of-transmission 5 tone PTT ID to send.

5 Tone PTT ID index EOT

At address 1h: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the index of the 5 tone end-of-transmission PTT ID to send.

QDC1200 Index

At address 2h: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the PTT ID index +1.

That is, 0=off, 1=index 0, ...

TX color code TX CC

At address 3h: 8-bit unsigned integer value (uint8). Default value 1h.

Sets the transmit color code.

Usually, this should be equal to the RX color code.

Unused data

At address 4h: Unused data of size 3ch:

717 VFO B channel extension v1.07done

Element at address fc2840h of size 40h.

Encodes additional channel information.

5 Tone PTT ID index BOT

At address 0h: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the index of the begin-of-transmission 5 tone PTT ID to send.

5 Tone PTT ID index EOT

At address 1h: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the index of the 5 tone end-of-transmission PTT ID to send.

QDC1200 Index

At address 2h: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the PTT ID index +1.

That is, 0=off, 1=index 0, ...

TX color code TX CC

At address 3h: 8-bit unsigned integer value (uint8). Default value 1h.

Sets the transmit color code.

Usually, this should be equal to the RX color code.

Unused data

At address 4h: Unused data of size 3ch:

718 Zone channel lists. v1.07done

Between 1 and 250 repetitions of Zone channel list.

719 Zone channel list v1.07done

Element of size 200h.

719.1 Zone channel indices v1.07done

Exactly 250 repetitions of Channel index.

A fixed sized list of channel indices for the zone.

Channel index

16-bit unsigned little-endian integer value (uint16le). Default value ffffh.

Specifies the 0-based channel index.

If unset, value is ffffh.

Unused data

At address 1f4h: Unused data of size ch: ff

720 Roaming channel bank v1.07done

Up to 250 repetitions of Roaming channel.

Encodes a bank of up to 250 roaming channels.

721 Roaming channel v1.07done

Element of size 20h.

Encodes a single roaming channel.

RX frequency

At address 0h: 32-bit bcd big-endian integer value (bcd8be).

Specifies the RX frequency.

The frequency is stored in multiples of 10Hz.

TX frequency

At address 4h: 32-bit bcd big-endian integer value (bcd8be).

Encodes the transmit frequency.

The frequency is encoded in multiples of 10Hz.

Color code override

At address 8h: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the color code to override the current channels setting with.

If set to 16 (10h), there is no override.

Time slot override

At address 9h: Enumeration of size 1h, with 3 options. Specifies if and how the current channels time slot gets overridden.

Value	Name	Description
0	Time Slot 1
1	Time Slot 2
2	None	If selected, the current channels time slot will not be overridden.

Name

At address ah: ASCII string of length (up to) 16 chars, 00h-padded.

Unused data

At address 1ah: Unused data of size 6h: 00

722 Roaming channel bitmap v1.07done

Element at address 1042000h of size 20h.

722.1 Roaming channel bits v1.07done

Exactly 250 repetitions of Roaming channel bit.

Roaming channel bit

boolean value. Default value 0h.

Single bit encoding whether a roaming channel is valid.

Unused data

At address 1fh:5: Unused data of size 0h:6: 00

723 Roaming zone bitmap v1.07done

Element at address 1042080h of size 10h.

723.1 Roaming zone bits v1.07done

Exactly 64 repetitions of Roaming zone enable bit.

Roaming zone enable bit

boolean value. Default value 0h.

Enables a single roaming zone.

Unused data

At address 8h: Unused data of size 8h: 00

724 Roaming zone bank v1.07done

Up to 64 repetitions of Roaming zone.

A collection of up to 64 roaming zones.

725 Roaming zone v1.07done

Element of size 80h.

Encodes a single roaming.

725.1 Roaming channel indices v1.07done

Exactly 64 repetitions of Roaming channel index.

Roaming channel index

8-bit unsigned integer value (uint8).

Name

At address 40h: ASCII string of length (up to) 16 chars, 00h-padded. Specifies the name of the roaming zone.

Unused data

At address 50h: Unused data of size 30h: 00

726 Scan list banks v1.07done

Up to 16 repetitions of Scan list bank.

727 Scan list bank v1.07done

Between 1 and 250 repetitions of Scan List.

728 Scan List v1.07done

Element of size 90h.

Unused data

At address 0h: Unused data of size 1h:

Priority Channel

At address 1h: Enumeration of size 1h, with 4 options.

Value	Name	Description
0	Off
1	Primary
2	Secondary
3	Both

Primary Priority Channel Index

At address 2h: 16-bit unsigned little-endian integer value (uint16le). Default value ffffh.

Index +1, 0=selected. ffff=none.

Secondary Priority Channel Index

At address 4h: 16-bit unsigned little-endian integer value (uint16le). Default value ffffh.

Index +1, 0=selected, ffff=none

Primary Look Back Time

At address 6h: 16-bit unsigned little-endian integer value (uint16le).

in 10sec.

Secondary Look Back Time

At address 8h: 16-bit unsigned little-endian integer value (uint16le). Default value 0h.

in 10sec.

Dropout delay

At address ah: 16-bit unsigned little-endian integer value (uint16le).

in 10sec.

Dwell time

At address ch: 16-bit unsigned little-endian integer value (uint16le).

in 10sec.

Revert Channel Type

At address eh: Enumeration of size 1h, with 8 options.

Value	Name	Description
0	Selected Channel
1	Selected + Active Channel
2	Primary Channel
3	Secondary Channel
4	Last Called
5	Last Used
6	Primary + Active Channel
7	Secondary + Active Channel

Name

At address fh: ASCII string of length (up to) 16 chars, 00h-padded.

Pad Byte

At address 1fh: Unused data of size 1h: 00

728.1 Channel Indices v1.07done

Exactly 50 repetitions of Channel Index.

Channel Index

16-bit unsigned little-endian integer value (uint16le). Default value 0h.

Index 0-based, ffffh=disabled

Unused data

At address 84h: Unused data of size ch: 00

729 Message linked list v1.07done

Up to 100 repetitions of List element.

730 List element v1.07done

Element of size 10h.

Unused data

At address 0h: Unused data of size 2h:

Next index

At address 2h: 8-bit unsigned integer value (uint8).

Current index

At address 3h: 8-bit unsigned integer value (uint8).

Unused data

At address 4h: Unused data of size ch:

731 Message byte-map v1.07done

Element at address 1640800h of size 90h.

731.1 Message enabled bytes v1.07done

Exactly 100 repetitions of Message enable byte.

Message enable byte

Enumeration of size 1h, with 2 options. Enables a specific message.

Value	Name	Description
0	Valid
255	Invalid

Unused data

At address 64h: Unused data of size 2ch:

732 Message banks v1.07done

Up to 13 repetitions of Message bank.

733 Message bank v1.07done

Between 1 and 8 repetitions of Message.

734 Message v1.07done

Element of size 100h.

Message text

At address 0h: ASCII string of length (up to) 99 chars, 00h-padded.

Unused data

At address 63h: Unused data of size 9dh:

735 FM broadcast channel frequencies v1.07done

Up to 100 repetitions of Channel frequency.

Channel frequency

32-bit bcd big-endian integer value (bcd8be).

736 FM broadcast VFO frequency v1.07done

Element at address 2480200h of size 10h.

VFO frequency

At address 0h: 32-bit bcd big-endian integer value (bcd8be).

Unused data

At address 4h: Unused data of size ch:

737 FM broadcast channel bitmap v1.07done

Element at address 2480210h of size 10h.

737.1 FM broadcast channel bits v1.07done

Exactly 100 repetitions of Channel bit.

Channel bit

boolean value.

Unused data

At address ch:3: Unused data of size 3h:4:

738 FM broadcast channel scan bitmap v1.07done

Element at address 2480220h of size 10h.

738.1 FM broadcast channel scan bits v1.07done

Exactly 100 repetitions of Channel bit.

Channel bit

boolean value.

Unused data

At address ch:3: Unused data of size 3h:4:

739 5-Tone IDs needs review

Up to 100 repetitions of 5-tone ID.

740 5-tone ID needs review

Element of size 20h.

Unused data

At address 0h: Unused data of size 1h:

Standard

At address 1h: Enumeration of size 1h, with 15 options.

Value	Name	Description
0	ZVEI1
1	ZVEI2
2	ZVEI3
3	PZVEI
4	DZVEI
5	PDZVEI
6	CCIR1
7	CCIR2
8	PCCIR
9	EEA
10	Euro Signal
11	NATEL
12	MODAT
13	CCITT
14	EIA

ID length

At address 2h: 8-bit signed integer value (int8).

Tone duration

At address 3h: 8-bit signed integer value (int8). Default value 0h.

Duration is encoded in ms. Valid values are 30ms - 100ms.

740.1 ID needs review

Exactly 40 repetitions of Digit.

Up to 40 digits

Digit

4-bit unsigned integer value (uint4). Default value 0h.

Encodes a single ID digit.

Name

At address 18h: ASCII string of length (up to) 7 chars, 20h-padded.

Pad Byte

At address 1fh: Unused data of size 1h: 00

741 5-Tone id bitmap needs review

Element at address 24c0c80h of size 10h.

741.1 5-tone id bits needs review

Exactly 100 repetitions of 5-tone id bit.

5-tone id bit

boolean value.

Unused data

At address ch:3: Unused data of size 3h:4:

742 5-Tone functions needs review

Exactly 16 repetitions of 5-Tone function.

Defines up to 16 functions, that can be triggered by a 5-tone id.

743 5-Tone function needs review

Element of size 20h.

Configures a single function

Function code

At address 0h: Enumeration of size 1h, with 7 options.

Value	Name	Description
0	Open squelch
1	Call all
2	Emergency alarm
3	Remote kill
4	Remote stun
5	Remote restore
6	Message group

Response

At address 1h: Enumeration of size 1h, with 3 options.

Value	Name	Description
0	None
1	Tone
2	Respond

ID Length

At address 2h: 8-bit unsigned integer value (uint8). Default value 0h.

743.1 ID needs review

Exactly 12 repetitions of ID digit.

ID digit

8-bit unsigned integer value (uint8). Default value 0h.

Encodes a single ID digit. Valid values are 0-9, A-F. Encoded as 0-15.

Pad Byte

At address fh: Unused data of size 1h: 00

Name

At address 10h: ASCII string of length (up to) 7 chars, 00h-padded.

Unused data

At address 17h: Unused data of size 9h: 00

744 5-Tone settings needs review

Element at address 24c1000h of size 80h.

Unknown data

At address 0h: Unknown data of size 20h.

Unused data

At address 20h: Unused data of size 1h:

Decoing response

At address 21h: Enumeration of size 1h, with 3 options.

Value	Name	Description
0	None
1	Tone
2	Tone and respond

Decoding standard

At address 22h: Enumeration of size 1h, with 15 options.

Value	Name	Description
0	ZVEI1
1	ZVEI2
2	ZVEI3
3	PZVEI
4	DZVEI
5	PDZVEI
6	CCIR1
7	CCIR2
8	PCCIR
9	EEA
10	Euro Signal
11	NATEL
12	MODAT
13	CCITT
14	EIA

Radio ID length

At address 23h: 8-bit signed integer value (int8).

Decoding tone duration in ms

At address 24h: 8-bit signed integer value (int8).

Radio ID

At address 25h: 56-bit signed little-endian integer value (int56le).

Post encode delay in 10ms

At address 2ch: 8-bit signed integer value (int8).

PTT ID 0=off, [5,75]

At address 2dh: 8-bit signed integer value (int8).

Auto reset time in 10s

At address 2eh: 8-bit signed integer value (int8).

First delay in 10ms

At address 2fh: 8-bit signed integer value (int8).

Sidetone enable

At address 30h: Enumeration of size 1h, with 2 options.

Value	Name	Description
0
1

Unused data

At address 31h: Unused data of size 1h: 00

Stop code

At address 32h: 8-bit signed integer value (int8).

Stop time in 10ms

At address 33h: 8-bit signed integer value (int8).

Decode time in 10ms

At address 34h: 8-bit signed integer value (int8).

Delay after stop in 10ms

At address 35h: 8-bit signed integer value (int8).

Pre-time in 10ms

At address 36h: 8-bit signed integer value (int8).

Unused data

At address 37h: Unused data of size 6h:

BOT standard

At address 3dh: Enumeration of size 1h, with 15 options.

Value	Name	Description
0	ZVEI1
1	ZVEI2
2	ZVEI3
3	PZVEI
4	DZVEI
5	PDZVEI
6	CCIR1
7	CCIR2
8	PCCIR
9	EEA
10	Euro Signal
11	NATEL
12	MODAT
13	CCITT
14	EIA

BOT ID length

At address 3eh: 8-bit signed integer value (int8).

BOT tone duration in ms

At address 3fh: 8-bit signed integer value (int8).

BOT ID

At address 40h: 96-bit signed little-endian integer value (int96le).

Unused data

At address 4ch: Unused data of size 11h:

EOT standard

At address 5dh: Enumeration of size 1h, with 15 options.

Value	Name	Description
0	ZVEI1
1	ZVEI2
2	ZVEI3
3	PZVEI
4	DZVEI
5	PDZVEI
6	CCIR1
7	CCIR2
8	PCCIR
9	EEA
10	Euro Signal
11	NATEL
12	MODAT
13	CCITT
14	EIA

EOT ID length

At address 5eh: 8-bit signed integer value (int8).

EOT tone duration in ms

At address 5fh: 8-bit signed integer value (int8).

EOT ID

At address 60h: 96-bit signed little-endian integer value (int96le).

Unused data

At address 6ch: Unused data of size 14h:

745 DTMF Settings needs review

Element at address 24c1080h of size 50h.

Symbol Interval

At address 0h: 8-bit unsigned integer value (uint8).

Valid values 0-15.

Group Code

At address 1h: 8-bit unsigned integer value (uint8).

Valid values 0-15

Response

At address 2h: Enumeration of size 1h, with 3 options.

Value	Name	Description
0	None
1	Tone
2	Tone + Respond

Tone Delay

At address 3h: 8-bit unsigned integer value (uint8).

Tone delay in 10ms.

First digit duration

At address 4h: 8-bit unsigned integer value (uint8).

Duration in 10ms.

Auto Reset Time

At address 5h: 8-bit unsigned integer value (uint8).

In multiple of 10s.

Radio ID

At address 6h: ASCII string of length (up to) 3 chars, 00h-padded.

Post-tone delay.

At address 9h: 8-bit unsigned integer value (uint8).

Delay in multiple of 10ms before EOT.

PTT Id Pause

At address ah: 8-bit unsigned integer value (uint8).

Pause between PTT Id transmissions in multiple of 10s.

PTT Id Enable

At address bh: 8-bit unsigned integer value (uint8).

D-Code Pause

At address ch: 8-bit unsigned integer value (uint8).

In seconds.

Side-tone enable

At address dh: 8-bit unsigned integer value (uint8).

Unused data

At address eh: Unused data of size 2h: 00 00

BOT Id

At address 10h: ASCII string of length (up to) 16 chars, FFh-padded.

EOT Id

At address 20h: ASCII string of length (up to) 16 chars, FFh-padded.

Remote kill Id

At address 30h: ASCII string of length (up to) 16 chars, FFh-padded.

Remote Stun Id

At address 40h: ASCII string of length (up to) 16 chars, FFh-padded.

746 2-Tone Ids needs review

Up to 24 repetitions of 2-Tone Id.

747 2-Tone Id needs review

Element of size 10h.

Encodes a single 2-tone id.

First tone frequency

At address 0h: 16-bit unsigned little-endian integer value (uint16le). Default value 0h.

Encodes the frequency in multiples of 0.1Hz.

Second tone frequency

At address 2h: 16-bit unsigned little-endian integer value (uint16le). Default value 0h.

Encodes the tone frequency in multiples of 0.1Hz.

Unused data

At address 4h: Unused data of size 4h: 00

Name

At address 8h: ASCII string of length (up to) 7 chars, 00h-padded. The name of the id.

Pad byte

At address fh: Unused data of size 1h: 00

748 2-Tone Id bitmap needs review

Element at address 24c1280h of size 10h.

Specifies, which 2-tone id is valid.

748.1 2-tone id enable bits needs review

Exactly 24 repetitions of 2-tone id enable bit.

2-tone id enable bit

boolean value. Default value 0h.

Unused data

At address 3h: Unused data of size dh: 00

749 2-Tone Settings needs review

Element at address 24c1290h of size 10h.

Unknown data

At address 0h: Unknown data of size 9h.

First tone duration

At address 9h: 8-bit unsigned integer value (uint8).

Encodes the first tone duration in multiples of 100ms. Valid values are 500-10000ms.

Second tone duration

At address ah: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the second tone duration in multiples of 100ms. Valid values are 500ms - 10000ms.

Long tone duration

At address bh: 8-bit unsigned integer value (uint8). Default value 0h.

Encodes the duration in terms of 100ms. Valid values are 500 - 10000ms.

Gap duration

At address ch: 8-bit unsigned integer value (uint8). Default value 0h.

Encodes the gap duration in multiples of 100ms. Valid values are 0 - 2000ms.

Reset period

At address dh: 8-bit unsigned integer value (uint8). Default value 0h.

Encodes the reset period in seconds. Valid values are 0 - 250s.

Side tone

At address eh:7: Enumeration of size 1h:1, with 2 options. Enables side tone.

Value	Name	Description
0	Off
1	On

Unknown data

At address fh:6: Unknown data of size 0h:7.

750 Zone Bitmap Element v1.07done

Element at address 24c1300h of size 20h.

750.1 Zone bitmap v1.07done

Exactly 250 repetitions of Zone enable bit.

Zone enable bit

boolean value. Default value 0h.

Unused data

At address 1fh:5: Unused data of size 0h:6: 00

751 Radio Id Bitmap Element v1.07done

Element at address 24c1320h of size 20h.

751.1 Radio Id Bitmap v1.07done

Exactly 250 repetitions of Radio Id Enable Bit.

Radio Id Enable Bit

boolean value. Default value 0h.

Unused data

At address 1fh:5: Unused data of size 0h:6:

752 Scan List Bitmap Element v1.07done

Element at address 24c1340h of size 20h.

752.1 Scan List Bitmap v1.07done

Exactly 250 repetitions of Scan List Enable Bit.

Scan List Enable Bit

boolean value.

Unused data

At address 1fh:5: Unused data of size 0h:6: 00

753 Hidden zone bitmap v1.07done

Element at address 24c1360h of size 20h.

753.1 Hidden zone bits v1.07done

Exactly 250 repetitions of Hidden zone bit.

Hidden zone bit

boolean value. Default value 0h.

If enabled, the corresponding zone is hidden.

Unused data

At address 1fh:5: Unused data of size 0h:6: 00

754 Alarm Settings v1.07done

Element at address 24c1400h of size 20h.

754.1 Analog Alarm Settings v1.07done

Element at address 0h of size ah.

Action

At address 0h: Enumeration of size 1h, with 4 options.

Value	Name	Description
0	None
1	TX and background
2	TX and non-local alarm
3	TX and local alarm

Mode

At address 1h: Enumeration of size 1h, with 3 options.

Value	Name	Description
0	None
1	DTMF
2	5-Tone

DTMF/5Tomn id index

At address 2h: 8-bit unsigned integer value (uint8). Default value 0h.

0-based index of DTMF or 5-tone id.

Alarm duration

At address 3h: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the alarm duration in seconds.

Alarm TX duration

At address 4h: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the alarm transmit duration in seconds.

Alarm RX duration

At address 5h: 8-bit unsigned integer value (uint8).

Specifies the alarm RX duration in seconds.

Alarm channel index

At address 6h: 16-bit unsigned little-endian integer value (uint16le). Default value 0h.

Must be a 0-based index to an analog channel.

Alarm channel selection

At address 8h: Enumeration of size 1h, with 2 options.

Value	Name	Description
0	Current Channel
1	Set Channel

Emergency cycle

At address 9h: 8-bit unsigned integer value (uint8). Default value 0h.

0 = continuous, otherwise count 1...255.

754.2 DMR Alarm Settings v1.07done

Element at address ah of size 8h.

Action

At address 0h: Enumeration of size 1h, with 4 options.

Value	Name	Description
0	None
1	TX and background
2	TX and non-local alarm
3	TX and local alarm

Alarm duration

At address 1h: 8-bit unsigned integer value (uint8). Default value 14h.

Specifies the alarm duration in seconds.

Alarm TX duration

At address 2h: 8-bit unsigned integer value (uint8). Default value 1fh.

Specifies the TX duration in seconds.

Alarm RX duration

At address 3h: 8-bit unsigned integer value (uint8). Default value 1fh.

Specifies the alarm RX duration in seconds.

Alarm channel index

At address 4h: 16-bit unsigned little-endian integer value (uint16le). Default value 0h.

Specifies the index the alarm channel. Must be an index of a DMR channel.

Alarm channel selection

At address 6h: Enumeration of size 1h, with 2 options.

Value	Name	Description
0	Channe index
1	Current channel

Emergency cycle

At address 7h: 8-bit unsigned integer value (uint8).

0=Continous, else number of cycles.

754.3 Lone Worker Settings v1.07done

Element at address 12h of size 4h.

Voice switch broadcast

At address 0h: 8-bit unsigned integer value (uint8). Default value 0h.

Some bull shit. Likely a period in minutes+1. Of regular transmissions. That is 0=1m, 1=2m,...

Area switch broadcast

At address 1h: 8-bit unsigned integer value (uint8). Default value 0h.

Uh, the engineerd absolutely gave a shit. This is some other time interval. This time in seconds+1. That is, 0=1s, 1=2s, ...

Mic switch broadcast

At address 2h: Enumeration of size 1h, with 2 options.

Value	Name	Description
0	Key
1	Voice transmission

Receive alarm

At address 3h: Enumeration of size 1h, with 2 options.

Value	Name	Description
0	Off
1	On

754.4 QDC1200 Settings v1.07done

Element at address 16h of size 6h.

Unknown data

At address 0h: Unknown data of size 2h.

Private Call ID

At address 2h: 16-bit bcd little-endian integer value (bcd4le). Default value 1h.

Group Call ID

At address 4h: 16-bit bcd little-endian integer value (bcd4le).

Unknown data

At address 1ch: Unknown data of size 4h.

755 DMR Alarm Extension needs review

Element at address 24c1440h of size 30h.

Call Type

At address 0h: Enumeration of size 1h, with 3 options.

Value	Name	Description
0	Private Call
1	Group Call
2	All Call

Unused data

At address 1h: Unused data of size 22h:

Destination Id

At address 23h: 32-bit bcd big-endian integer value (bcd8be).

Unused data

At address 27h: Unused data of size 9h: 00

756 Channel Bitmap Element v1.07done

Element at address 24c1500h of size 200h.

756.1 Channel enable bits v1.07done

Exactly 4000 repetitions of Channel enable bit.

Channel enable bit

boolean value.

Unused data

At address 1f4h: Unused data of size ch:

757 DMR encryption Keys v1.07done

Exactly 32 repetitions of DMR Encryption Id.

DMR Encryption Id

16-bit unsigned big-endian integer value (uint16be).

Unused data

At address 24c1800h: Unused data of size 500h: 00

758 Auto repeater offset frequency bank v1.07done

Element at address 24c2000h of size 3f0h.

Holds up to 250 offset frequencies for the auto-repeater feature.

758.1 Auto repeater offset frequencies v1.07done

Exactly 250 repetitions of Offset frequency.

The actual list of exactly 250 offset frequencies.

Offset frequency

32-bit signed little-endian integer value (int32le). Default value 0h.

Encodes the absolute value of the offset frequency.

The frequency is encoded as multiples of 10Hz. If 0=disabled.

Unused data

At address 3e8h: Unused data of size 8h: 00

759 2-Tone functions needs review

Up to 16 repetitions of Two-Tone function.

Encodes up to 16 two-tone functions.

760 Two-Tone function needs review

Element of size 20h.

First tone frequency

At address 0h: 16-bit unsigned little-endian integer value (uint16le). Default value 0h.

Encodes the frequency of the first tone.

The value is stored in multiples of 0.1Hz.

Second tone frequency

At address 2h: 16-bit unsigned little-endian integer value (uint16le). Default value 0h.

Encodes the frequency of the second tone.

The value is stored in multiples of 0.1Hz.

Response

At address 4h: Enumeration of size 1h, with 3 options.

Value	Name	Description
0	None
1	Tone
2	Respond

Function name

At address 5h: ASCII string of length (up to) 7 chars, 00h-padded.

Unused data

At address ch: Unused data of size 14h: 00

761 2-Tone function bitmap needs review

Element at address 24c2600h of size 10h.

761.1 2-Tone function bits needs review

Exactly 16 repetitions of 2-Tone function bit.

2-Tone function bit

boolean value. Default value 0h.

Unused data

At address 2h: Unused data of size eh: 00

762 AES encryption key bank v1.07done

Element at address 24c4000h of size 4000h.

762.1 AES encryption keys v1.07done

Exactly 255 repetitions of AES encryption key.

762.2 AES encryption key v1.07done

Element of size 40h.

Key Id

At address 0h: 8-bit unsigned integer value (uint8). Default value 0h.

1-based key Id. 0=Off.

Key Data

At address 1h: 256-bit unsigned big-endian integer value (uint256be). Default value 0h.

Up to 256 bit AES key. The key is right aligned. You may consider it as a big-endian integer.

Unused data

At address 21h: Unused data of size 1h: 00

Key size

At address 22h: 8-bit unsigned integer value (uint8). Valid values between 20h and 40h, with default value 40h.

Specifies the key size in multiples of 4bit.

Unused data

At address 23h: Unused data of size 1dh: 00

Unused data

At address 3fc0h: Unused data of size 40h: 00

763 AES encryption key bitmap v1.07done

Element at address 24c8000h of size 20h.

763.1 AES key enable bits v1.07done

Exactly 255 repetitions of Key enable bit.

Key enable bit

boolean value. Default value 0h.

Unused data

At address 1fh:0: Unused data of size 0h:1: 00

764 General Settings v1.07done

Element at address 2500000h of size f0h.

Enable key tone

At address 0h: 8-bit unsigned integer value (uint8). Default value 0h.

Display Mode

At address 1h: Enumeration of size 1h, with 2 options. Speficies the channel display mode. That is name or frequency.

Value	Name	Description
0	Channel
1	Frequency

Enable automatic key lock

At address 2h: 8-bit unsigned integer value (uint8).

Auto-shutoff delay

At address 3h: Enumeration of size 1h, with 5 options. Specifies the time period afer wich the radio shuts off.

Value	Name	Description
0	Off
1	10 min
2	30 min
3	60 min
4	120 min

Transmit Timeout TOT

At address 4h: 8-bit unsigned integer value (uint8).

Specifies the transmit time out in multiples of 30s.

Valid values are Off (0), 30s, ..., 240s.

Language

At address 5h: Enumeration of size 1h, with 2 options.

Value	Name	Description
0	English
1	German

Boot Display

At address 6h: Enumeration of size 1h, with 3 options.

Value	Name	Description
0	Default
1	Custom Text
2	Custom Image

Enable Boot Password

At address 7h: 8-bit unsigned integer value (uint8).

Frequency step size

At address 8h: Enumeration of size 1h, with 10 options. Specifies the frequency step size.

Value	Name	Description
0	2.5 kHz
1	5 kHz
2	6.25 kHz
3	8.33 kHz
4	10 kHz
5	12.5 kHz
6	20 kHz
7	25 kHz
8	30 kHz
9	50 kHz

Squelch Level VFO A

At address 9h: 8-bit unsigned integer value (uint8). Default value 1h.

Specifies the squelch level for VFO A.

Valid values are Off, 1, ..., 5, where 0=Off.

Squelch Level VFO B

At address ah: 8-bit unsigned integer value (uint8). Default value 1h.

Valid values are Off, 1, ..., 5, where 0=Off.

Power save mode

At address bh: Enumeration of size 1h, with 3 options.

Value	Name	Description
0	Off
1	1:1 (50%)
2	1:2 (66%)

VOX sensitivity

At address ch: Enumeration of size 1h, with 4 options. Enables and sets the VOX sensitivity.

Value	Name	Description
0	Off
1	1
2	2
3	3

VOX Delay

At address dh: 8-bit unsigned integer value (uint8).

Delay expressed in 500ms + 100ms * n. Valid ranges are 0.5, ..., 3.0s.

VFO Scan Type

At address eh: Enumeration of size 1h, with 3 options. Specifies if and when a scan continues.

Value	Name	Description
0	Fixed Time	Continues after a fixed time period.
1	Carrier	Continues once the carrier is gone.
2	Stop	Stops the scan after the first signal is recieved.

DMR mic gain

At address fh: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the DMR microphone gain.

PF1 Short Press Function

At address 10h: Enumeration of size 1h, with 58 options.

Value	Name	Description
0	Off
1	Voltage
2	Power
3	Talk Around
4	Reverse
5	DMR Encryption
6	Call
7	VOX
8	VFO/Channel
9	Sub Channel PTT
10	Scan
11	FM Broadcast
12	Alarm
13	Record Switch
14	Record
15	SMS
16	Dial
17	GPS Information
18	Monitor
19	Main Channel Toggle
20	Hot Key 1
21	Hot Key 2
22	Hot Key 3
23	Hot Key 4
24	Hot Key 5
25	Hot Key 6
26	Work Alone
27	Nuisance Delete
28	DMR Monitor
29	Sub Channel Toggle
30	Priority Zone
31	VFO Scan
32	Mic Sound Quality
33	Last Call Reply
34	Channel Type Switch
35	Ranging
36	Roaming
37	Channel Ranging
38	MaxVolume
39	Slot Switch
40	APRS Type Switch
41	Zone Select
42	Set Timed Roaming
43	APRS Settings
44	Mute timing
45	CTCSS/DCS Settings
46	TBST
47	Bluetooth
48	GPS
49	Channel Name
50	CDT Scan
51	APRS Send
52	Display/Light Off	Disables display and all lights.
53	GPS Roaming
54	WX Alarm
55	Squelch Level
56	ChannelSetting
57	Satellite Prediction

PF2 Short Press Function

At address 11h: Enumeration of size 1h, with 58 options.

Value	Name	Description
0	Off
1	Voltage
2	Power
3	Talk Around
4	Reverse
5	DMR Encryption
6	Call
7	VOX
8	VFO/Channel
9	Sub Channel PTT
10	Scan
11	FM Broadcast
12	Alarm
13	Record Switch
14	Record
15	SMS
16	Dial
17	GPS Information
18	Monitor
19	Main Channel Toggle
20	Hot Key 1
21	Hot Key 2
22	Hot Key 3
23	Hot Key 4
24	Hot Key 5
25	Hot Key 6
26	Work Alone
27	Nuisance Delete
28	DMR Monitor
29	Sub Channel Toggle
30	Priority Zone
31	VFO Scan
32	Mic Sound Quality
33	Last Call Reply
34	Channel Type Switch
35	Ranging
36	Roaming
37	Channel Ranging
38	MaxVolume
39	Slot Switch
40	APRS Type Switch
41	Zone Select
42	Set Timed Roaming
43	APRS Settings
44	Mute timing
45	CTCSS/DCS Settings
46	TBST
47	Bluetooth
48	GPS
49	Channel Name
50	CDT Scan
51	APRS Send
52	Display/Light Off	Disables display and all lights.
53	GPS Roaming
54	WX Alarm
55	Squelch Level
56	ChannelSetting
57	Satellite Prediction

PF1 Long Press Function

At address 12h: Enumeration of size 1h, with 58 options.

Value	Name	Description
0	Off
1	Voltage
2	Power
3	Talk Around
4	Reverse
5	DMR Encryption
6	Call
7	VOX
8	VFO/Channel
9	Sub Channel PTT
10	Scan
11	FM Broadcast
12	Alarm
13	Record Switch
14	Record
15	SMS
16	Dial
17	GPS Information
18	Monitor
19	Main Channel Toggle
20	Hot Key 1
21	Hot Key 2
22	Hot Key 3
23	Hot Key 4
24	Hot Key 5
25	Hot Key 6
26	Work Alone
27	Nuisance Delete
28	DMR Monitor
29	Sub Channel Toggle
30	Priority Zone
31	VFO Scan
32	Mic Sound Quality
33	Last Call Reply
34	Channel Type Switch
35	Ranging
36	Roaming
37	Channel Ranging
38	MaxVolume
39	Slot Switch
40	APRS Type Switch
41	Zone Select
42	Set Timed Roaming
43	APRS Settings
44	Mute timing
45	CTCSS/DCS Settings
46	TBST
47	Bluetooth
48	GPS
49	Channel Name
50	CDT Scan
51	APRS Send
52	Display/Light Off	Disables display and all lights.
53	GPS Roaming
54	WX Alarm
55	Squelch Level
56	ChannelSetting
57	Satellite Prediction

PF2 Long Press Function

At address 13h: Enumeration of size 1h, with 58 options.

Value	Name	Description
0	Off
1	Voltage
2	Power
3	Talk Around
4	Reverse
5	DMR Encryption
6	Call
7	VOX
8	VFO/Channel
9	Sub Channel PTT
10	Scan
11	FM Broadcast
12	Alarm
13	Record Switch
14	Record
15	SMS
16	Dial
17	GPS Information
18	Monitor
19	Main Channel Toggle
20	Hot Key 1
21	Hot Key 2
22	Hot Key 3
23	Hot Key 4
24	Hot Key 5
25	Hot Key 6
26	Work Alone
27	Nuisance Delete
28	DMR Monitor
29	Sub Channel Toggle
30	Priority Zone
31	VFO Scan
32	Mic Sound Quality
33	Last Call Reply
34	Channel Type Switch
35	Ranging
36	Roaming
37	Channel Ranging
38	MaxVolume
39	Slot Switch
40	APRS Type Switch
41	Zone Select
42	Set Timed Roaming
43	APRS Settings
44	Mute timing
45	CTCSS/DCS Settings
46	TBST
47	Bluetooth
48	GPS
49	Channel Name
50	CDT Scan
51	APRS Send
52	Display/Light Off	Disables display and all lights.
53	GPS Roaming
54	WX Alarm
55	Squelch Level
56	ChannelSetting
57	Satellite Prediction

Unknown data

At address 14h: Unknown data of size 1h.

Work Mode A

At address 15h: Enumeration of size 1h, with 2 options.

Value	Name	Description
0	Channel
1	VFO

Work Mode B

At address 16h: Enumeration of size 1h, with 2 options.

Value	Name	Description
0	Channel
1	VFO

STE type

At address 17h: Enumeration of size 1h, with 5 options. Specifies the squelch tail elemination type.

Value	Name	Description
0	Off
1	Silent
2	120 deg
3	180 deg
4	240 deg

STE Frequency

At address 18h: Enumeration of size 1h, with 3 options. Squelch tail elemination frequency.

Value	Name	Description
0	Off
1	55.2 Hz
2	259.2 Hz

Group call hang time

At address 19h: 8-bit unsigned integer value (uint8).

Specifies hang time in seconds. That is. 0=1s, ..., 29=30s, 30=30min, 31=infinite.

Private call hang time

At address 1ah: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies hang time in seconds. That is. 0=1s, ..., 29=30s, 30=30min, 31=infinite.

Unknown data

At address 1bh: Unknown data of size 1h.

Preamble duration

At address 1ch: 8-bit unsigned integer value (uint8). Default value 5h.

Specifies the preamble duration in multiples of 60ms.

That is 0 = 0ms, ..., 40 = 2400ms.

FM broadcast channel index

At address 1dh: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the pre-set FM broadcast channel.

FM broadcast mode

At address 1eh: Enumeration of size 1h, with 2 options.

Value	Name	Description
0	Channel
1	VFO

Boot Zone A

At address 1fh: 8-bit unsigned integer value (uint8).

When work mode for VFO A is set to Channel, this index specifies the zone. 0-based zone index.

Boot Zone B

At address 20h: 8-bit unsigned integer value (uint8).

When work mode for VFO B is set to Channel, this index specifies the zone. 0-based zone index.

Unknown data

At address 21h: Unknown data of size 1h.

Enable Recording

At address 22h: 8-bit unsigned integer value (uint8).

Unknown data

At address 23h: Unknown data of size 1h.

Enable man down

At address 24h: 8-bit unsigned integer value (uint8). Default value 0h.

If enables, the radio will start an alarm, if the radio drops.

Unknown data

At address 25h: Unknown data of size 1h.

Display Brightness

At address 26h: 8-bit unsigned integer value (uint8). Default value 0h.

Possible values [0-4].

Backlight duration

At address 27h: Enumeration of size 1h, with 16 options. Specifies the time, the backlight stays on after every event. E.g, button press or call.

Value	Name	Description
0	Infinite
1	5s
2	10s
3	15s
4	20s
5	25s
6	30s
7	1min
8	2min
9	3min
10	4min
11	5min
12	15min
13	30min
14	45min
15	1h

Enable GPS

At address 28h: 8-bit unsigned integer value (uint8). Default value 0h.

Enable SMS Alert

At address 29h: 8-bit unsigned integer value (uint8).

Unknown data

At address 2ah: Unknown data of size 1h.

Enable FM broadcast monitor

At address 2bh: 8-bit unsigned integer value (uint8). Default value 0h.

If set to 1, radio calls are received while listening to the FM broadcast.

Main VFO

At address 2ch: Enumeration of size 1h, with 2 options. Specifies, which VFO is the main one.

Value	Name	Description
0	A
1	B

Enable Subchannel

At address 2dh: 8-bit unsigned integer value (uint8). Default value 0h.

TBST

At address 2eh: Enumeration of size 1h, with 4 options.

Value	Name	Description
0	1000 Hz
1	1450 Hz
2	1750 Hz
3	2100 Hz

Enable Call Alert

At address 2fh: 8-bit unsigned integer value (uint8).

Time Zone

At address 30h: Enumeration of size 1h, with 32 options. How about encoding it as a singed integer in multiples of 5min? Also, UTC+13h were you drunk?

Value	Name	Description
0	UTC-12:00h
1	UTC-11:00h
2	UTC-10:00h
3	UTC-09:00h
4	UTC-08:00h
5	UTC-07:00h
6	UTC-06:00h
7	UTC-05:00h
8	UTC-04:00h
9	UTC-03:30h
10	UTC-03:00h
11	UTC-02:00h
12	UTC-01:00h
13	UTC
14	UTC+01:00h
15	UTC+02:00h
16	UTC+03:00h
17	UTC+03:30h
18	UTC+04:00h
19	UTC+04:30h
20	UTC+05:00h
21	UTC+05:30h
22	UTC+05:45h
23	UTC+06:00h
24	UTC+07:00h
25	UTC+08:00h
26	UTC+08:30h
27	UTC+09:00h
28	UTC+10:00h
29	UTC+11:00h
30	UTC+12:00h
31	UTC+13:00h

Talk permit tone

At address 31h: Enumeration of size 1h, with 4 options.

Value	Name	Description
0	None
1	DMR
2	FM
3	Both

Enable DMR call reset tone

At address 32h: 8-bit unsigned integer value (uint8).

VOX Source

At address 33h: Enumeration of size 1h, with 3 options.

Value	Name	Description
0	Internal
1	External
2	Both

UI Mode

At address 34h: Enumeration of size 1h, with 2 options. Specifies the freedom in the UI. That is, in amateur mode, you can set a lot of stuff using the radio itself. In professional mode, you are basically locked in.

Value	Name	Description
0	Amateur
1	Professional

Unknown data

At address 35h: Unknown data of size 1h.

DMR channel free tone

At address 36h: Enumeration of size 1h, with 4 options. Selects the channel free/idle tone.

Value	Name	Description
0	Off
1	Type 1
2	Type 2
3	Type 3

Menu exit time

At address 37h: 8-bit unsigned integer value (uint8). Default value 5h.

Specifies the menu hang time/duartion.

The duration is specified in multiples of 5s + 5s. That is, 0=5s, 1=10s, 2=15s, ..., 11=60s.

Enable filter own Id

At address 38h: 8-bit unsigned integer value (uint8). Default value 0h.

Filters own ID from list of missed calls.

Enable Startup Tone

At address 39h: 8-bit unsigned integer value (uint8). Default value 0h.

Unknown data

At address 3ah: Unknown data of size 1h.

Max speaker volume

At address 3bh: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the maximum speaker volume.

Valid values are [Indoors, 1, ..., 8]. Where Indoors is encoded as 0.

kill

At address 3ch: 8-bit unsigned integer value (uint8). Default value 0h.

Unknown data

At address 3dh: Unknown data of size 1h.

Enable remote monitor

At address 3eh: 8-bit unsigned integer value (uint8). Default value 0h.

Enable RX DMR APRS Positions

At address 3fh: 8-bit unsigned integer value (uint8).

Unknown data

At address 40h: Unknown data of size 1h.

PF1 Very Long Press Function

At address 41h: Enumeration of size 1h, with 58 options.

Value	Name	Description
0	Off
1	Voltage
2	Power
3	Talk Around
4	Reverse
5	DMR Encryption
6	Call
7	VOX
8	VFO/Channel
9	Sub Channel PTT
10	Scan
11	FM Broadcast
12	Alarm
13	Record Switch
14	Record
15	SMS
16	Dial
17	GPS Information
18	Monitor
19	Main Channel Toggle
20	Hot Key 1
21	Hot Key 2
22	Hot Key 3
23	Hot Key 4
24	Hot Key 5
25	Hot Key 6
26	Work Alone
27	Nuisance Delete
28	DMR Monitor
29	Sub Channel Toggle
30	Priority Zone
31	VFO Scan
32	Mic Sound Quality
33	Last Call Reply
34	Channel Type Switch
35	Ranging
36	Roaming
37	Channel Ranging
38	MaxVolume
39	Slot Switch
40	APRS Type Switch
41	Zone Select
42	Set Timed Roaming
43	APRS Settings
44	Mute timing
45	CTCSS/DCS Settings
46	TBST
47	Bluetooth
48	GPS
49	Channel Name
50	CDT Scan
51	APRS Send
52	Display/Light Off	Disables display and all lights.
53	GPS Roaming
54	WX Alarm
55	Squelch Level
56	ChannelSetting
57	Satellite Prediction

PF2 Very Long Press Function

At address 42h: Enumeration of size 1h, with 58 options.

Value	Name	Description
0	Off
1	Voltage
2	Power
3	Talk Around
4	Reverse
5	DMR Encryption
6	Call
7	VOX
8	VFO/Channel
9	Sub Channel PTT
10	Scan
11	FM Broadcast
12	Alarm
13	Record Switch
14	Record
15	SMS
16	Dial
17	GPS Information
18	Monitor
19	Main Channel Toggle
20	Hot Key 1
21	Hot Key 2
22	Hot Key 3
23	Hot Key 4
24	Hot Key 5
25	Hot Key 6
26	Work Alone
27	Nuisance Delete
28	DMR Monitor
29	Sub Channel Toggle
30	Priority Zone
31	VFO Scan
32	Mic Sound Quality
33	Last Call Reply
34	Channel Type Switch
35	Ranging
36	Roaming
37	Channel Ranging
38	MaxVolume
39	Slot Switch
40	APRS Type Switch
41	Zone Select
42	Set Timed Roaming
43	APRS Settings
44	Mute timing
45	CTCSS/DCS Settings
46	TBST
47	Bluetooth
48	GPS
49	Channel Name
50	CDT Scan
51	APRS Send
52	Display/Light Off	Disables display and all lights.
53	GPS Roaming
54	WX Alarm
55	Squelch Level
56	ChannelSetting
57	Satellite Prediction

Unknown data

At address 43h: Unknown data of size 1h.

Unknown data

At address 44h: Unknown data of size 1h.

Unknown data

At address 45h: Unknown data of size 1h.

Long Press Duration

At address 46h: 8-bit unsigned integer value (uint8).

Specifies the long-press duration in seconds.

That is t = 1s + 1s * n. Valid values are 1s, ..., 5s.

Show volume bar

At address 47h: 8-bit unsigned integer value (uint8). Default value 0h.

Shows the volume bar, when the volume is changed.

Auto-repeater A direction

At address 48h: Enumeration of size 1h, with 3 options.

Value	Name	Description
0	Off
1	Positive
2	Negative

DMR monitor mode

At address 49h: Enumeration of size 1h, with 3 options.

Value	Name	Description
0	Off
1	Single slot
2	Double slot

DMR monitor match CC

At address 4ah: Enumeration of size 1h, with 2 options.

Value	Name	Description
0	Any
1	Same

DMR monitor match id

At address 4bh: Enumeration of size 1h, with 2 options.

Value	Name	Description
0	Any
1	Same

Enable DMR monitor slot hold

At address 4ch: 8-bit unsigned integer value (uint8). Default value 0h.

Show last caller

At address 4dh: Enumeration of size 1h, with 4 options. Specifies if and how the last caller is shown.

Value	Name	Description
0	Off
1	DMR ID
2	Callsign
3	Both

Unused data

At address 4eh: Unknown data of size 1h.

Man down delay

At address 4fh: 8-bit unsigned integer value (uint8). Valid values between 0h and 255h, with default value 0h.

Specifies the man-down-alarm delay in seconds.

FM Call hold time

At address 50h: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the hold time in seconds. Valid values are 0s, ..., 30s.

Show Clock

At address 51h: 8-bit unsigned integer value (uint8).

Max head-phone volume

At address 52h: 8-bit unsigned integer value (uint8). Default value 0h.

Encodes the maximum head-phone volume.

Valid values are [Indoors, 1, ..., 8]. Where Indoors is encoded as 0.

Sent (DMR) APRS message.

At address 53h: 8-bit unsigned integer value (uint8). Default value 0h.

Unknown data

At address 54h: Unknown data of size 3h.

Enable enhanced audio

At address 57h: 8-bit unsigned integer value (uint8). Default value 0h.

VFO Scan UHF min Frequency

At address 58h: 32-bit unsigned little-endian integer value (uint32le).

in 10Hz.

VFO Scan UHF max Frequency

At address 5ch: 32-bit unsigned little-endian integer value (uint32le).

in 10Hz

VFO Scan VHF min Frequency

At address 60h: 32-bit unsigned little-endian integer value (uint32le).

in 10Hz

VFO Scan VHF max Frequency

At address 64h: 32-bit unsigned little-endian integer value (uint32le).

in 10Hz.

UHF Auto-repeater offset frequency 1 index

At address 68h: 8-bit unsigned integer value (uint8). Default value ffh.

The 0-based index of the offset frequency.

If set to ffh, disabled.

VHF Auto-repeater 1 offset frequency index.

At address 69h: 8-bit unsigned integer value (uint8). Default value ffh.

Specifies the 0-based index of the offset frequency.

If set to ffh, disables the auto-repeater feature.

Unknown data

At address 6ah: Unknown data of size 4h.

Enable answer sub channel

At address 6eh: 8-bit unsigned integer value (uint8). Default value 0h.

If enabled, a sub-channel call can be answered when pressing PTT within 5s.

Priority zone index A

At address 6fh: 8-bit unsigned integer value (uint8). Default value ffh.

Specifies the zone 0-based index for the priority zone of VFO A. If none is set, set to ffh.

Priority zone index B

At address 70h: 8-bit unsigned integer value (uint8). Default value ffh.

Specifies the zone 0-based index for the priority zone of VFO B. If none is set, set to ffh.

Unknown data

At address 71h: Unknown data of size 1h.

764.1 Call Melody v1.07done

Element at address 72h of size 14h.

764.1.1 Tones v1.07done

Exactly 5 repetitions of Frequency.

Frequency

16-bit unsigned little-endian integer value (uint16le).

in Hz.

764.1.2 Durations v1.07done

Exactly 5 repetitions of Duration.

Duration

16-bit unsigned little-endian integer value (uint16le).

in ms.

764.2 Idle Melody v1.07done

Element at address 86h of size 14h.

764.2.1 Tones v1.07done

Exactly 5 repetitions of Frequency.

Frequency

16-bit unsigned little-endian integer value (uint16le).

in Hz.

764.2.2 Durations v1.07done

Exactly 5 repetitions of Duration.

Duration

16-bit unsigned little-endian integer value (uint16le).

in ms.

764.3 Reset Melody v1.07done

Element at address 9ah of size 14h.

764.3.1 Tones v1.07done

Exactly 5 repetitions of Frequency.

Frequency

16-bit unsigned little-endian integer value (uint16le).

in Hz.

764.3.2 Durations v1.07done

Exactly 5 repetitions of Duration.

Duration

16-bit unsigned little-endian integer value (uint16le).

in ms.

Unknown data

At address aeh: Unknown data of size 1h.

Call display mode

At address afh: Enumeration of size 1h, with 3 options.

Value	Name	Description
0	Off
1	Call
2	Name

Unknown data

At address b0h: Unknown data of size 1h.

Enable blue tooth

At address b1h: 8-bit unsigned integer value (uint8). Default value 0h.

If set to 1, blue tooth is enabled.

Blue tooth and internal mic

At address b2h: 8-bit unsigned integer value (uint8). Default value 0h.

If set to 1, the bluetooth and internal mic are used.

Blue tooth and internal speaker.

At address b3h: 8-bit unsigned integer value (uint8). Default value 0h.

If set to 1, blue tooth and the internal speaker are used.

Enable plug-in recording tone

At address b4h: 8-bit unsigned integer value (uint8). Default value 0h.

Whatever that is. Here you can enable it.

Ranging interval

At address b5h: 8-bit unsigned integer value (uint8). Default value 5h.

Specifies the ranging interval in seconds. Valid values are [5,255].

No offset. Nobody gave a f**k. I wonder, what happens if one sets it to 0.

Blue tooth mic gain

At address b6h: 8-bit unsigned integer value (uint8).

Specifies the microphone gain for the blue tooth source.

Valid values are 1-5, encoded as 0-4. That is, 0=1, ..., 4=5.

Blue tooth speaker gain

At address b7h: 8-bit unsigned integer value (uint8). Default value 2h.

Specifies the speaker gain for the blue tooth output.

Valid values are 1-5, encoded as 0-4. That is, 0=1, ..., 4=5.

Channel number mode

At address b8h: Enumeration of size 1h, with 2 options. WTF, really? Specifies whether the total or within-zone number is show as the channel number. It makes absolutely no sense to show a total channel number, dear AnyTone engineer. The user can only access channels through a zone. So, if a channel is not assigned to any zone, it is basically hidden. So, explain to me, why should anyone care about the absolute channel number?

Value	Name	Description
0	Total
1	Within Zone

Enable show current contact

At address b9h: 8-bit unsigned integer value (uint8). Default value 0h.

Enables the display of the current contact.

Why is the default off? Isn't it a pretty important information?

Auto-roaming period

At address bah: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the auto-roaming period (if enabled) in multiples of 1 minute.

The period is stored as n + 1min. That is 0=1min, 1=2min, ..., 255=256min.

Key tone volume

At address bbh: 8-bit unsigned integer value (uint8). Default value 0h.

A value in range [1,15]. If set to 0 it is adjustable.

Call sign color

At address bch: Enumeration of size 1h, with 7 options. Specifies the color, the callsign is shown in. Because it is incredible important to be able to set it. Default is orange (0).

Value	Name	Description
0	Orange
1	Red
2	Yellow
3	Green
4	Turquoise
5	Blue
6	White

Units

At address bdh: Enumeration of size 1h, with 2 options. .

Value	Name	Description
0	Metric
1	Archaic

Unused data

At address beh:7: Unused data of size 0h:3: 00

Forced lock FoLk

At address beh:4: boolean value. Default value 0h.

Side key lock SkLk

At address beh:3: boolean value.

If set, the side keys are locked too.

Unused data

At address beh:2: Unused data of size 0h:1: 00

Enable keyboard lock KbLk

At address beh:1: boolean value. Default value 0h.

If enabled, the keyboard is locked.

Enable knob lock KnLk

At address beh:0: boolean value. Default value 0h.

If set, the knob is also locked.

Roaming delay

At address bfh: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the delay in seconds between a auto-roaming trigger and the actual auto-roaming.

Valid values are [None, 1s, 30s], where None is encoded as 0.

Standby text color

At address c0h: Enumeration of size 1h, with 8 options. Another palette. Thanks! Seriously dear AnyTone engineer. Why for f**k sake can't you produce a consistent encoding of colors? It is called copy-and-paste. The produces a lot of code you can impress your supervisor with at zero cost. Give it a try, you gonna love it.

Value	Name	Description
0	White
1	Black
2	Orange
3	Red
4	Yellow
5	Green
6	Turquoise
7	Blue

Standby background image

At address c1h: Enumeration of size 1h, with 3 options. Specifies a wallpaper for the radio. Yes, very important feature.

Value	Name	Description
0	Default
1	Custom 1
2	Custom 2

Show last caller on boot

At address c2h: 8-bit unsigned integer value (uint8). Default value 0h.

If set to 1, shows the last caller after boot.

Why do I need to know that? That might be ages ago.

SMS standard

At address c3h: Enumeration of size 1h, with 3 options. Specifies the SMS standard to use.

Value	Name	Description
0	Motorola
1	Hytera
2	ETSI DMR

VHF auto-repeater 1 min frequency

At address c4h: 32-bit unsigned little-endian integer value (uint32le). Default value 0h.

Specifies the lower bound of the first VHF auto-repeater frequency range.

The freuqency is stored in multiples of 10Hz.

VHF auto-repeater 1 max frequency

At address c8h: 32-bit unsigned little-endian integer value (uint32le).

Speifies the upper bound of the first VHF auto-repeater frequency range.

The frequency is stored in multiples of 10Hz.

UHF auto-repeater 1 min frequency

At address cch: 32-bit unsigned little-endian integer value (uint32le). Default value 0h.

Specifies the lower bound of the first UHF auto-repeater frequency range.

The freuqency is stored in multiples of 10Hz.

UHF auto-repeater 1 max frequency

At address d0h: 32-bit unsigned little-endian integer value (uint32le).

Speifies the upper bound of the first UHF auto-repeater frequency range.

The frequency is stored in multiples of 10Hz.

Auto-repeater B direction

At address d4h: Enumeration of size 1h, with 3 options.

Value	Name	Description
0	Off
1	Positive
2	Negative

Send FM own ID

At address d5h: 8-bit unsigned integer value (uint8). Default value 0h.

in CPS.

Unknown data

At address d6h: Unknown data of size 1h.

Enable default boot channel

At address d7h: 8-bit unsigned integer value (uint8).

If set to 1, a default channel for VFO A and B is set.

Boot zone VFO A

At address d8h: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the zone index for the boot zone.

That is, the zone selected for VFO A at boot.

Boot zoot VFO B

At address d9h: 8-bit unsigned integer value (uint8).

Default boot zone for VFO B

Encodes the 0-based boot zone for the VFO B. That is, the zone being selected at bootup.

Default boot channel VFO A

At address dah: 8-bit unsigned integer value (uint8). Default value ffh.

Specifies the channel index within the boot zone.

If set to ffh, the VFO is selected.

Default boot channel VFO B

At address dbh: 8-bit unsigned integer value (uint8). Default value ffh.

Encodes the channel index for the boot channel for VFO B.

That is, the 0-based index of the channel within the boot zone B. If ffh is selected, the VFO is selected as the boot channel.

Roaming zone index

At address dch: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the 0-based roaming zone index.

Enable repeater check

At address ddh: 8-bit unsigned integer value (uint8). Default value 0h.

Repeater check interval

At address deh: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the repeater check interval in multuples of 5s. The period is 5s * n + 5s with valid values in 5s - 50s.

Repeater check retry count

At address dfh: 8-bit unsigned integer value (uint8). Default value 0h.

Number is specified as 3 + n with valid values in [3, 5].

Auto-roaming start condition

At address e0h: Enumeration of size 1h, with 2 options. Specifies, when auto roaming is triggered.

Value	Name	Description
0	Periodic	Auto roaming starts periodically.
1	Out-of-range	Auto roaming starts on out-of-range event.

Backlight duration TX

At address e1h: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the duration of the backlight during TX.

Encodes the duration in seconds. Valid values are [1,30]. If set to 0, the backlight is disabled during TX.

Show menu separator

At address e2h: 8-bit unsigned integer value (uint8). Default value 0h.

If set to 1, shows menu separators.

Keep last caller

At address e3h: 8-bit unsigned integer value (uint8). Default value 0h.

If set to 1, the last caller is kept when the channel is changed.

Channel A name color

At address e4h: Enumeration of size 1h, with 7 options. Specifies the color of the channel name. Because it is incredible important to be able to set it. Default is orange (0).

Value	Name	Description
0	Orange
1	Red
2	Yellow
3	Green
4	Turquoise
5	Blue
6	White

Repeater check OOR notification

At address e5h: Enumeration of size 1h, with 3 options. Specifies the mode of notification for an out-of-range event.

Value	Name	Description
0	Off
1	Tone
2	Voice

Backlight duration RX

At address e6h: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the duration of the backlight during RX.

The duration is specified in multiples of 5s. If set to 0 the backlight stays on.

Enable auto roaming

At address e7h: 8-bit unsigned integer value (uint8). Default value 0h.

If set to 1, enables auto roaming.

Unknown data

At address e8h: Unknown data of size 1h.

Mute duration

At address e9h: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the duration of a mute in minutes, triggered by a function key.

The duration is specified as t = 1min + 1min * n. That is 0=1min, ..., 255 = 256min.

Repeater check OOR notification count

At address eah: 8-bit unsigned integer value (uint8).

Number of notifications for a out-of-range event. The number is specified as n + 1 with an valid value in [1, 10].

Enable GPS test

At address ebh: 8-bit unsigned integer value (uint8). Default value 0h.

If set to 1, the GPS gets tested at boot.

Enable MCU reset

At address ech: 8-bit unsigned integer value (uint8). Default value 1h.

Blue tooth hold duration

At address edh: Enumeration of size 1h, with 33 options.

Value	Name	Description
0	Off
1	1s
2	2s
3	3s
4	4s
5	5s
6	6s
7	7s
8	8s
9	9s
10	11s
11	12s
12	13s
13	14s
14	15s
15	16s
16	17s
17	18s
18	19s
19	20s
20	21s
21	22s
22	23s
23	24s
24	25s
25	26s
26	27s
27	28s
28	29s
29	30s
30	60s
31	120s
32	Infinite

Blue tooth RX delay

At address eeh: 8-bit unsigned integer value (uint8). Default value 2h.

Delay in multiples of 500ms.

That is 500ms + 500ms * n: 0=500ms, 1=1s, ..., 10=5.5s.

Unknown data

At address efh: Unknown data of size 1h.

765 B channels v1.07done

Element at address 2500100h of size 400h.

B channel.

765.1 A channel List v1.07done

Element at address 0h of size 200h.

765.1.1 Channel indices v1.07done

Exactly 250 repetitions of Channel index.

Channel A indices for all possible zones.

Channel index

16-bit unsigned little-endian integer value (uint16le). Default value 0h.

Specifies a 0-based channel index. No special values.

Unused data

At address 1f4h: Unused data of size ch: 00

765.2 B channel List v1.07done

Element at address 200h of size 200h.

765.2.1 Channel indices v1.07done

Exactly 250 repetitions of Channel index.

Channel B indices for all possible zones.

Channel index

16-bit unsigned little-endian integer value (uint16le). Default value 0h.

Specifies a 0-based channel index. No special values.

Unused data

At address 1f4h: Unused data of size ch: 00

766 DTMF Ids needs review

Exactly 16 repetitions of DTMF Id.

Encodes DTMF PTT ids.

767 DTMF Id needs review

Exactly 16 repetitions of DTMF digit.

DTMF digit

8-bit unsigned integer value (uint8). Default value ffh.

Valid values 0h - fh. If not set, ffh.

768 Boot Settings v1.07done

Element at address 2500600h of size 30h.

Boot text line 1

At address 0h: ASCII string of length (up to) 14 chars, 00h-padded. Specifies the first line of the boot text.

Pad bytes

At address eh: Unused data of size 2h: 00 00

Boot text line 2

At address 10h: ASCII string of length (up to) 14 chars, 00h-padded. Encodes the second line of the boot text.

Pad bytes

At address 1eh: Unused data of size 2h: 00 00

Boot password

At address 20h: ASCII string of length (up to) 8 chars, 00h-padded. Plain boot password.

Although this is an ASCII string, only digits are allowed. That is 30h-39h.

Unused data

At address 28h: Unused data of size 8h: 00

769 APRS settings v1.07done

Element at address 2501000h of size 240h.

Unknown data

At address 0h: Unknown data of size 5h.

FM APRS TX delay

At address 5h: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the transmit FM APRS delay in multiple of 20ms. Valid values are 0-5100ms.

FM APRS sub tone type

At address 6h: Enumeration of size 1h, with 3 options. Specifies the transmit sub-tone for FM APRS.

Value	Name	Description
0	None
1	CTCSS
2	DCS

FM APRS TX CTCSS tone

At address 7h: Enumeration of size 1h, with 51 options.

Value	Name	Description
0	62.5 Hz
1	67.0 Hz
2	69.3 Hz
3	71.9 Hz
4	74.4 Hz
5	77.0 Hz
6	79.7 Hz
7	82.5 Hz
8	85.4 Hz
9	88.5 Hz
10	91.5 Hz
11	94.8 Hz
12	97.4 Hz
13	100.0 Hz
14	103.5 Hz
15	107.2 Hz
16	110.9 Hz
17	114.8 Hz
18	118.8 Hz
19	123.0 Hz
20	127.3 Hz
21	131.8 Hz
22	136.5 Hz
23	141.3 Hz
24	146.2 Hz
25	151.4 Hz
26	156.7 Hz
27	159.8 Hz
28	162.2 Hz
29	165.5 Hz
30	167.9 Hz
31	171.3 Hz
32	173.8 Hz
33	177.3 Hz
34	179.9 Hz
35	183.5 Hz
36	186.2 Hz
37	189.9 Hz
38	192.8 Hz
39	196.6 Hz
40	199.5 Hz
41	203.5 Hz
42	206.5 Hz
43	210.7 Hz
44	218.1 Hz
45	225.7 Hz
46	229.1 Hz
47	233.6 Hz
48	241.8 Hz
49	250.3 Hz
50	254.1 Hz

FM APRS DCS code

At address 8h: 16-bit unsigned little-endian integer value (uint16le).

Encodes the DCS code in a complex way.

That is, the least significant 9 bits encode the binary DCS code and 9th bit encodes the inverted flag of DCS.

Manual TX interval

At address ah: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the manual TX interval in second. 0: Off, 1-255.

Automatic TX interval

At address bh: 8-bit unsigned integer value (uint8).

Specifies the interval in multiples of 30s. 0:Off. Valid values 30-7650s.

APRS monitor enable

At address ch: Enumeration of size 1h, with 2 options. Listen to the APRS packet transmission.

Value	Name	Description
0	Off
1	On

Fixed location index

At address dh: 8-bit unsigned integer value (uint8). Default value 0h.

Speicfies which fixed location to use.

The index is stored +1. That is 1= index 0, ... . If 0 is set, GPS is used for the location.

769.1 Fixed location 0 v1.07done

Element at address eh of size 8h.

Latitude degree

At address 0h: 8-bit unsigned integer value (uint8).

Encodes the first position latitude degree value.

Latitude minute

At address 1h: 8-bit unsigned integer value (uint8).

Latitude seconds

At address 2h: 8-bit unsigned integer value (uint8).

Latitude hemisphere

At address 3h: Enumeration of size 1h, with 2 options.

Value	Name	Description
0	North
1	South

Longitude degree

At address 4h: 8-bit unsigned integer value (uint8).

Longitude minute

At address 5h: 8-bit unsigned integer value (uint8).

Longitude seconds

At address 6h: 8-bit unsigned integer value (uint8).

Longitude hemisphere

At address 7h: Enumeration of size 1h, with 2 options.

Value	Name	Description
0	East
1	West

Destination call

At address 16h: ASCII string of length (up to) 6 chars, 00h-padded.

Destination SSID

At address 1ch: 8-bit unsigned integer value (uint8). Default value 0h.

Source call

At address 1dh: ASCII string of length (up to) 6 chars, 00h-padded.

Source SSID

At address 23h: 8-bit unsigned integer value (uint8).

APRS path string 0-14h

At address 24h: ASCII string of length (up to) 21 chars, 00h-padded. First half of the APRS path string. Contains the first 24 bytes.

APRS symbol table

At address 39h: 8-bit signed integer value (int8).

A char!

APRS symbol

At address 3ah: 8-bit signed integer value (int8).

A char!

FM APRS transmit power

At address 3bh: Enumeration of size 1h, with 4 options.

Value	Name	Description
0	Low
1	Mid
2	High
3	Max

Prewave delay

At address 3ch: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the pre-wave delay in multiples of 10ms. Valid values are 0-2550ms.

Unknown data

At address 3dh: Unknown data of size 3h.

769.2 DMR APRS settings v1.07done

Element at address 40h of size 38h.

769.2.1 Channel indices v1.07done

Exactly 8 repetitions of Channel index.

Channel index

16-bit unsigned little-endian integer value (uint16le). Default value 0h.

0-based transmit channel. 0fa0=VFO A, 0fa1=VFO B, 0fa2=Current

769.2.2 Destination DMR IDs v1.07done

Exactly 8 repetitions of DMR destination ID.

DMR destination ID

32-bit bcd big-endian integer value (bcd8be). Default value 0h.

769.2.3 Call types v1.07done

Exactly 8 repetitions of Call type.

Call type

Enumeration of size 1h, with 3 options.

Value	Name	Description
0	Private Call
1	Group Call
2	All Call

Roaming support

At address 78h: Enumeration of size 1h, with 2 options.

Value	Name	Description
0	Disabled
1	Enabled

769.3 DMR APRS time slots v1.07done

Exactly 8 repetitions of Time slot.

Time slot

Enumeration of size 1h, with 3 options.

Value	Name	Description
0	Channel slot
1	Time slot 1
2	Time slot 2

Repeater activation delay

At address 81h: 8-bit unsigned integer value (uint8).

Delay in multiples of 100ms. 0=Off.

Valid values are Off, 100ms, ..., 1000ms.

APRS display duration

At address 82h: 8-bit unsigned integer value (uint8).

Specifies the time, an APRS message is shown. Stored as 3s + n seconds.

That is, 0=3s, 1=4s, ... ch=15s, dh = infinity.

APRS path 15h-38h

At address 83h: ASCII string of length (up to) 35 chars, 00h-padded. Second half of the APRS path.

Fixed altitude

At address a6h: 16-bit unsigned little-endian integer value (uint16le).

Encodes the fixed altitude in feet.

Unknown data

At address a8h: Unknown data of size 2h.

FM APRS bandwidth

At address aah: Enumeration of size 1h, with 2 options.

Value	Name	Description
0	Narrow
1	Wide

Enable AX.25 CRC check

At address abh: Enumeration of size 1h, with 2 options. If disabled, the all decoded AX.25 frames are processed, even those with invalid CRCs.

Value	Name	Description
0	On
1	Off

769.4 FM APRS frequencies v1.07done

Exactly 8 repetitions of FM APRS Frequency.

FM APRS Frequency

32-bit bcd big-endian integer value (bcd8be). Default value 0h.

Unknown data

At address cch: Unknown data of size 1h.

769.5 Fixed locations 1-7 v1.07done

Element at address cdh of size 38h.

769.5.1 Fixed location latitude degree v1.07done

Exactly 7 repetitions of Latitude degree.

Latitude degree

8-bit unsigned integer value (uint8). Default value 0h.

769.5.2 Fixed location latitude minute v1.07done

Exactly 7 repetitions of Latitude minute.

Latitude minute

8-bit unsigned integer value (uint8).

769.5.3 Fixed latitude seconds v1.07done

Exactly 7 repetitions of Latitude seconds.

Latitude seconds

8-bit unsigned integer value (uint8).

769.5.4 Fixed location latitude hemispheres v1.07done

Exactly 7 repetitions of Latitude hemisphere.

Latitude hemisphere

Enumeration of size 1h, with 2 options.

Value	Name	Description
0	North
1	South

769.5.5 Fixed location longitude degree v1.07done

Exactly 7 repetitions of Longitude degree.

Longitude degree

8-bit unsigned integer value (uint8).

769.5.6 Fixed location longitude minute v1.07done

Exactly 7 repetitions of Longitude minute.

Longitude minute

8-bit unsigned integer value (uint8).

769.5.7 Fixed location longitude seconds v1.07done

Exactly 7 repetitions of Longitude seconds.

Longitude seconds

8-bit unsigned integer value (uint8).

769.5.8 Fixed location longitude hemispheres v1.07done

Exactly 7 repetitions of Longitude hemisphere.

Longitude hemisphere

Enumeration of size 1h, with 2 options.

Value	Name	Description
0	East
1	West

Unknown data

At address 105h: Unknown data of size fbh.

APRS message

At address 200h: ASCII string of length (up to) 60 chars, 00h-padded.

Unknown data

At address 23ch: Unknown data of size 4h.

770 DMR APRS message v1.07done

Element at address 2501280h of size 30h.

DMR APRS message

At address 0h: ASCII string of length (up to) 32 chars, 00h-padded.

Unused data

At address 20h: Unused data of size 10h: 00

771 General Settings Extension needs review

Element at address 2501400h of size 100h.

Unknown data

At address 0h: Unknown data of size 0h:5.

Show color code ShCoCo

At address 0h:2: boolean value. Default value 0h.

If enabled, the color code is shown.

Show time slot ShTiSl

At address 0h:1: boolean value. Default value 0h.

If enabled, the time slot is shown.

Show channel type ShChTy

At address 0h:0: boolean value. Default value 0h.

If enables, the channel type is shown.

Talker alias type

At address 1h: Enumeration of size 1h, with 2 options.

Value	Name	Description
0	Radio Alias
1	Custom Text

Date format

At address 2h: Enumeration of size 1h, with 2 options. Specifies the format, the date is shown in.

Value	Name	Description
0	Big Endian	YYYY/MM/DD
1	Little Endian	DD/MM/YYYY

Unknown data

At address 3h: Unknown data of size 1bh.

Talker alias priority

At address 1eh: Enumeration of size 1h, with 3 options.

Value	Name	Description
0	Off
1	Contact
2	Over the air

Talker alias encoding

At address 1fh: Enumeration of size 1h, with 3 options.

Value	Name	Description
0	ISO 7
1	ISO 8
2	Unicode

Unknown data

At address 20h: Unknown data of size 1h.

Enable blue tooth PTT latch

At address 21h: 8-bit unsigned integer value (uint8). Default value 0h.

If set to 1, one press with lattch the PTT and a second press will unlatch the PTT again.

UHF auto-repeater 2 offset index

At address 22h: 8-bit unsigned integer value (uint8). Default value ffh.

Specifies the 0-based index of the offset frequency for the second UHF auto-repeater frequency range.

VHF auto-repeater 2 offset index

At address 23h: 8-bit unsigned integer value (uint8). Default value ffh.

Specifies the 0-based index of the offset frequency for the second VHF auto-repeater frequency range.

VHF auto-repeater 2 min frequency

At address 24h: 32-bit unsigned little-endian integer value (uint32le). Default value 0h.

Specifies the lower bound of the second VHF auto-repeater frequency range.

The freuqency is stored in multiples of 10Hz.

VHF auto-repeater 2 max frequency

At address 28h: 32-bit unsigned little-endian integer value (uint32le). Default value 0h.

Specifies the upper bound of the second VHF auto-repeater frequency range.

The freuqency is stored in multiples of 10Hz.

UHF auto-repeater 2 min frequency

At address 2ch: 32-bit unsigned little-endian integer value (uint32le). Default value 0h.

Specifies the lower bound of the second UHF auto-repeater frequency range.

The freuqency is stored in multiples of 10Hz.

UHF auto-repeater 2 max frequency

At address 30h: 32-bit unsigned little-endian integer value (uint32le). Default value 0h.

Specifies the upper bound of the second UHF auto-repeater frequency range.

The freuqency is stored in multiples of 10Hz.

Blue tooth PTT sleep delay

At address 34h: 8-bit unsigned integer value (uint8). Default value 2h.

Specifies the delay befor the BT PTT button goes into sleep mode.

Encodes as minutes. Valid values are [Infinite, 1min, ..., 4min], where 0=Infinite.

GPS Modes

At address 35h: Enumeration of size 1h, with 7 options.

Value	Name	Description
0	GPS
1	BDS
2	GPS+BDS
3	GLONASS
4	GPS+GLONASS
5	BDS+GLONASS
6	All

STE duration

At address 36h: 8-bit unsigned integer value (uint8). Default value 25h.

Specifies the STE duration in mutliples of 10ms. Valid values are [10ms-1000ms]

Manual dial group call hang time

At address 37h: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies hang time in seconds. That is. 0=1s, ..., 29=30s, 30=30min, 31=infinite.

Manual dial private call hang time

At address 38h: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies hang time in seconds. That is. 0=1s, ..., 29=30s, 30=30min, 31=infinite.

Channel B name color

At address 39h: Enumeration of size 1h, with 7 options. Specifies the color of the channel name. Because it is incredible important to be able to set it. Default is orange (0).

Value	Name	Description
0	Orange
1	Red
2	Yellow
3	Green
4	Turquoise
5	Blue
6	White

Encryption Type

At address 3ah: Enumeration of size 1h, with 2 options.

Value	Name	Description
0	Common/DMR
1	AES/ARC4

Enable TOT reminder

At address 3bh: 8-bit unsigned integer value (uint8). Default value 0h.

If set to 1, five seconds before the transmit timeout, a warn tone sounds.

Enable transmit power AGC

At address 3ch: 8-bit unsigned integer value (uint8). Default value 0h.

Zone A name color

At address 3dh: Enumeration of size 1h, with 7 options. Specifies the color of the zone name. Because it is incredible important to be able to set it. Default is orange (0).

Value	Name	Description
0	Orange
1	Red
2	Yellow
3	Green
4	Turquoise
5	Blue
6	White

Zone B name color

At address 3eh: Enumeration of size 1h, with 7 options. Specifies the color of the zone name. Because it is incredible important to be able to set it. Default is orange (0).

Value	Name	Description
0	Orange
1	Red
2	Yellow
3	Green
4	Turquoise
5	Blue
6	White

Disable auto-shutoff timer reset on call

At address 3fh: 8-bit unsigned integer value (uint8). Default value 0h.

If set to 1, the auto-shutoff timer is not reset by a call.

Unknown data

At address 40h: Unknown data of size 1h.

Enable FM channel free tone

At address 41h: 8-bit unsigned integer value (uint8). Default value 0h.

Unknown data

At address 42h: Unknown data of size 1h.

FM mic gain

At address 43h: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the FM microphone gain.

Enable GPS roaming.

At address 44h: 8-bit unsigned integer value (uint8). Default value 0h.

Unknown data

At address 45h: Unknown data of size 1h.

771.1 Call end melody v1.07done

Element at address 46h of size 14h.

771.1.1 Tones v1.07done

Exactly 5 repetitions of Frequency.

Frequency

16-bit unsigned little-endian integer value (uint16le).

in Hz.

771.1.2 Durations v1.07done

Exactly 5 repetitions of Duration.

Duration

16-bit unsigned little-endian integer value (uint16le).

in ms.

771.2 All-call melody v1.07done

Element at address 5ah of size 14h.

771.2.1 Tones v1.07done

Exactly 5 repetitions of Frequency.

Frequency

16-bit unsigned little-endian integer value (uint16le).

in Hz.

771.2.2 Durations v1.07done

Exactly 5 repetitions of Duration.

Duration

16-bit unsigned little-endian integer value (uint16le).

in ms.

Header repetitions

At address 6eh: 8-bit unsigned integer value (uint8). Default value 2h.

Specifies how often the so-called voice header is repeated. Valid values are 2, ..., 8.

Unknown data

At address 6fh: Unknown data of size 8h.

Satellite fixed location index

At address 77h: 8-bit unsigned integer value (uint8). Valid values between 0h and 8h, with default value 0h.

Specifies the index of the fixed location used for satellite predictions.

The index is specified as index+1. If set to 0, GPS is used (if present).

Satellite transmit power

At address 78h: Enumeration of size 1h, with 4 options.

Value	Name	Description
0	Low
1	Mid
2	High
3	Turbo

Satellite FM squelch level

At address 79h: 8-bit unsigned integer value (uint8). Valid values between 0h and 5h, with default value 1h.

Specifies the FM squelch level for satellite operation.

Valid values are [0,5], where 0 means open.

Satellite AOS limit

At address 7ah: 8-bit unsigned integer value (uint8). Valid values between 0h and 30h, with default value 10h.

The name is weird. Likely a lower bound to filter low elevation passes.

According to the manufacturer CPS the unit is degrees. So I belive, that this is the smallest maximum elevation a pass must reach to be considerted a proper pass.

Unknown data

At address 7bh: Unknown data of size 85h.

772 GPS roaming zone bank v1.07done

Exactly 32 repetitions of GPS roaming zone.

Encodes up to 32 GPS roaming zones.

773 GPS roaming zone v1.07done

Element of size 20h.

Encodes a single GPS roaming zone.

Description

That is, a position and radio defining a region associated with a certain roaming zone. Whenever the radio enters this region, the associated roaming zone gets selected.

Zone enable

At address 0h: Enumeration of size 1h, with 2 options.

Value	Name	Description
0	Off
1	On

Roaming zone index

At address 1h: 8-bit unsigned integer value (uint8). Default value ffh.

Specifies the roaming zone index to use. If set to ffh, the zone is disabled.

Latitude degree

At address 2h: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the integer part of the latitude in degrees.

Valid value range 0-89.

Latitude minutes

At address 3h: 8-bit unsigned integer value (uint8). Default value 0h.

Encodes the integer latitude minute part.

Valid value range 0-59.

Latitude centi-minute

At address 4h: 8-bit unsigned integer value (uint8).

Encodes the 1/100th of a minute.

Valid value range 0-99.

Latitude hemisphere

At address 5h: Enumeration of size 1h, with 2 options.

Value	Name	Description
0	North
1	South

Longitude degrees

At address 6h: 8-bit unsigned integer value (uint8). Default value 0h.

Encodes the integer part of the latitude degree.

Valid value range 0-179.

Longitude minutes

At address 7h: 8-bit unsigned integer value (uint8). Default value 0h.

Encodes the longitude minutes.

Valid value range 0-59.

Longitude centi-minutes

At address 8h: 8-bit unsigned integer value (uint8). Default value 0h.

Encodes the 1/100th part of the minute.

Valid value range 0-99.

Longitude hemisphere

At address 9h: Enumeration of size 1h, with 2 options.

Value	Name	Description
0	East
1	West

Unused data

At address ah: Unused data of size 2h: 00

Radius

At address ch: 16-bit unsigned little-endian integer value (uint16le). Default value 0h.

The unit is specified in the setting.

Unused data

At address eh: Unused data of size 12h: 00

774 Fixed Location Names v1.07done

Element at address 2504800h of size 90h.

Unknown data

At address 0h: Unknown data of size 3h.

774.1 Names v1.07done

Exactly 8 repetitions of String.

774.2 String v1.07done

Element of size 11h.

Name

At address 0h: ASCII string of length (up to) 16 chars, 00h-padded.

Unused data

At address 10h: Unused data of size 1h: 00

Unused data

At address 8bh: Unused data of size 5h: 00

775 Zone Names v1.07done

Between 1 and 250 repetitions of Zone Name.

Zone Name

ASCII string of length (up to) 32 chars, 00h-padded.

776 Radio Ids v1.07done

Up to 250 repetitions of Radio Id Element.

777 Radio Id Element v1.07done

Element of size 20h.

DMR Id

At address 0h: 32-bit bcd big-endian integer value (bcd8be).

Pad byte

At address 4h: Unused data of size 1h: 00

Name

At address 5h: ASCII string of length (up to) 16 chars, 00h-padded.

Unused data

At address 15h: Unused data of size bh: 00

778 Primary ID Settings v1.07done

Element at address 2582000h of size 20h.

Primary DMR ID

At address 0h: 32-bit bcd big-endian integer value (bcd8be). Default value 0h.

Used flag

At address 4h: Enumeration of size 1h, with 2 options.

Value	Name	Description
0	Unused
1	Used

Primary radio name

At address 5h: ASCII string of length (up to) 26 chars, 00h-padded.

Pad byte

At address 1fh: Unused data of size 1h: 00

779 FM Quick Call Bank needs review

Element at address 25c0000h of size 100h.

779.1 FM Quick Calls needs review

Exactly 4 repetitions of FM Qick Call.

779.2 FM Qick Call needs review

Element of size 2h.

Type

At address 0h: Enumeration of size 1h, with 4 options.

Value	Name	Description
0	None
1	DTMF
2	Two-Tone
3	Five-Tone

Analog Contact Index

At address 1h: 8-bit unsigned integer value (uint8). Default value 0h.

0-based index, ffh=none.

Unused data

At address 8h: Unused data of size f8h: 00

780 Status Messages v1.07done

Exactly 32 repetitions of Status Message.

Status Message

ASCII string of length (up to) 32 chars, 00h-padded.

781 Hot-Key Settings v1.07done

Exactly 18 repetitions of Hot-Key Setting.

782 Hot-Key Setting v1.07done

Element of size 30h.

Type

At address 0h: Enumeration of size 1h, with 2 options.

Value	Name	Description
0	Call
1	Menu

Menu Item

At address 1h: Enumeration of size 1h, with 15 options.

Value	Name	Description
0	None
1	Show SMS Menu
2	Show New SMS Menu
3	Show Hot Text Menu
4	Show SMS Inbox
5	Show SMS Outbox
6	Show Contacts
7	Show Menual Dial Menu
8	Show Call Log
9	Show outgoing calls
10	Show received calls
11	Show missed call
12	Show Zone menu
13	Show Radio Settings Menu
14	Show Channel Settings Menu

Call Type

At address 2h: Enumeration of size 1h, with 2 options.

Value	Name	Description
0	FM
1	DMR

DMR Call Type

At address 3h: Enumeration of size 1h, with 7 options.

Value	Name	Description
255	Off
0	Group Call
1	Private Call
2	All Call
3	Hot Text
4	Call Tip
5	Status Message

Contact Index

At address 4h: 32-bit unsigned little-endian integer value (uint32le). Default value 0h.

0-based index, ffffffffh = none.

Used for both, FM and DMR contacts.

Message Index

At address 8h: 8-bit unsigned integer value (uint8). Default value ffh.

0-based SMS message index or status message index. ffh = none.

Unused data

At address 9h: Unused data of size 27h:

783 Status Message Bitmap Element v1.07done

Element at address 25c0b00h of size 10h.

783.1 Status Message Bitmap v1.07done

Exactly 32 repetitions of Status Message Bit.

Status Message Bit

boolean value. Default value 0h.

Unused data

At address 4h: Unused data of size ch: 00

784 Group List Bitmap Element v1.07done

Element at address 25c0b10h of size 20h.

784.1 Group List Bitmap v1.07done

Exactly 250 repetitions of Group List Enable.

Group List Enable

boolean value.

Unused data

At address 1fh:5: Unused data of size 0h:6:

785 ARC4 encryption keys v1.07done

Exactly 255 repetitions of ARC4 encryption key.

786 ARC4 encryption key v1.07done

Element of size 10h.

Key id

At address 0h: 8-bit unsigned integer value (uint8). Default value 0h.

Valid values 1-255. 0=Off.

Key bits

At address 1h: 40-bit unsigned big-endian integer value (uint40be). Default value 0h.

Unused data

At address 6h: Unused data of size ah: 00

787 ARC4 key bitmap v1.07done

Element at address 25c1c00h of size 20h.

787.1 ARC4 enable bits v1.07done

Exactly 255 repetitions of Key enable bit.

Key enable bit

boolean value.

Unused data

At address 1fh:0: Unused data of size 0h:1: 00

Unknown data

At address 25c2000h: Unknown data of size 20h.

Unknown data

At address 25c2c80h: Unknown data of size 20h.

788 Valid contact indices v1.07done

Exactly 10000 repetitions of Contact index.

Some weird contact index map, containing the indices of up to 10000 valid contacts.

Contact index

32-bit unsigned little-endian integer value (uint32le). Default value ffffffffh.

Specifies the index of a valid contact.

789 Contact Bitmap Element v1.07done

Element at address 2640000h of size 4f0h.

789.1 Contact Bitmap v1.07done

Exactly 10000 repetitions of Contact disable bit.

Contact disable bit

boolean value. Default value 0h.

Unused data

At address 4e2h: Unused data of size eh: 00

790 Contact banks v1.07done

Up to 10 repetitions of Contact Bank.

791 Contact Bank v1.07done

Up to 10000 repetitions of Contact.

792 Contact v1.07done

Element of size 64h.

Call Type

At address 0h: Enumeration of size 1h, with 3 options. Specifies the call type of the contact.

Value	Name	Description
0	Private Call
1	Group Call
2	All Call

Name

At address 1h: ASCII string of length (up to) 16 chars, 00h-padded.

Unused data

At address 11h: Unused data of size 12h: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

DMR ID

At address 23h: 32-bit bcd big-endian integer value (bcd8be).

Call Alert

At address 27h: Enumeration of size 1h, with 0 options.

Unused data

At address 28h: Unused data of size 3ch:

793 Analog Contact Index List v1.07done

Exactly 128 repetitions of Analog Contact Index.

Analog Contact Index

8-bit unsigned integer value (uint8).

Stores the 0-based index of the i-th entry.

If not set, set to ffh.

794 Analog Contact ByteMap v1.07done

Exactly 128 repetitions of Analog Contact Enable Byte.

Analog Contact Enable Byte

8-bit unsigned integer value (uint8).

Inverted bytemap for every contact entry. 0=enabled, ffh = disabled

795 Analog Contacts v1.07done

Up to 128 repetitions of DTMF Contact.

796 DTMF Contact v1.07done

Element of size 18h.

DTMF Number

At address 0h: 56-bit bcd big-endian integer value (bcd14be).

Number Length

At address 7h: 8-bit unsigned integer value (uint8).

Name

At address 8h: ASCII string of length (up to) 15 chars, 00h-padded.

Pad Byte

At address 17h: Unused data of size 1h: 00

797 Group List Bank v1.07done

Up to 250 repetitions of Group List.

798 Group List v1.07done

Element of size 120h.

798.1 Contact Indices v1.07done

Exactly 64 repetitions of Contact Index.

Contact Index

32-bit unsigned little-endian integer value (uint32le). Default value ffffffffh.

0-based

Name

At address 100h: ASCII string of length (up to) 16 chars, 00h-padded.

Unused data

At address 110h: Unused data of size 10h:

799 QDC contact index map v1.07done

Exactly 128 repetitions of QDC contact index.

QDC contact index

8-bit unsigned integer value (uint8).

Holds the 0-based index of the i-th contact.

If unused, set to ffh.

800 QDC contact bytemap v1.07done

Exactly 128 repetitions of Enable byte.

Enable byte

8-bit unsigned integer value (uint8). Valid values between 0h and ffh, with default value ffh.

If set to 0=enabled, ffh=disabled.

801 QDC contacts v1.07done

Up to 128 repetitions of QDC1200 contact.

A bank of up to 128 QDC1200 contacts.

802 QDC1200 contact v1.07done

Element of size 20h.

Action

At address 0h: Enumeration of size 1h, with 7 options.

Value	Name	Description
0	Selective call
1	Check online
2	Alert
3	Remote kill
4	Remote enable
5	Call alert
6	Remote monitor

Call Type

At address 1h: Enumeration of size 1h, with 3 options.

Value	Name	Description
0	Private call
1	Group call
2	All call

ACK enable

At address 2h: 8-bit unsigned integer value (uint8). Valid values between 0h and 1h, with default value 0h.

Unused data

At address 3h: Unused data of size 1h: 00

Group call ID

At address 4h: 16-bit bcd little-endian integer value (bcd4le). Default value 0h.

Private call ID

At address 6h: 16-bit bcd little-endian integer value (bcd4le). Default value 0h.

Name

At address 8h: ASCII string of length (up to) 16 chars, 00h-padded.

Unused data

At address 18h: Unused data of size 4h: 00

Unknown data

At address 1ch: Unknown data of size 4h.

803 Contact Map v1.07done

Up to 10000 repetitions of Contact Map Entry.

804 Contact Map Entry v1.07done

Element of size 8h.

DMR ID and Group Call Flag

At address 0h: 32-bit unsigned little-endian integer value (uint32le).

1) | GCF

Contact Index

At address 4h: 32-bit unsigned little-endian integer value (uint32le).