Address	Element	Description
800000h	Channel banks	A sparse series of channel banks.
802000h	Channel extension banks	A series of channel extension banks corresponding to each encoded channel bank.
fc0800h	VFO Channels
fc2800h	VFO Channel Extensions
1000000h	Zone channel lists.
1040000h	Roaming channel bank	Encodes a bank of up to 250 roaming channels.
1042000h	Roaming channel bitmap
1042080h	Roaming zone bitmap
1043000h	Roaming zone bank	A collection of up to 64 roaming zones.
1080000h	Scan list banks
1640000h	Message linked list
1640800h	Message byte-map
2140000h	Message banks
2480000h	FM broadcast channel frequencies
2480200h	FM broadcast VFO frequency
2480210h	FM broadcast channel bitmap
2480220h	FM broadcast channel scan bitmap
24c0000h	5-Tone IDs
24c0c80h	5-Tone Id bitmap
24c0d00h	5-tone functions
24c1000h	5-Tone settings
24c1080h	DTMF Settings
24c1100h	2-Tone Ids
24c1280h	2-Tone Id bitmap	Specifies, which 2-tone id is valid.
24c1290h	2-Tone Settings
24c1300h	Zone Bitmap Element
24c1320h	Radio Id Bitmap Element
24c1340h	Scan List Bitmap Element
24c1360h	Hidden zone bitmap
24c1400h	Alarm Settings
24c1440h	DMR Alarm Extension
24c1500h	Channel Bitmap Element
24c1700h	DMR Encryption IDs
24c1800h	DMR Encryption Keys
24c2000h	Auto repeater offset frequency bank	Holds up to 250 offset frequencies for the auto-repeater feature.
24c2400h	2-Tone functions	Encodes up to 16 two-tone functions.
24c2600h	2-Tone function bitmap
24c4000h	AES encryption key bank
24c8000h	AES encryption key bitmap
2500000h	General Settings
2500100h	B channels	B channel.
2500500h	DTMF Ids	Encodes DTMF PTT ids.
2500600h	Boot Settings
2501000h	APRS settings
2501200h	FM APRS Message
2501280h	DMR APRS message
2501400h	General Settings Extension
2501800h	APRS receive filter bank
2504000h	GPS roaming zone bank	Encodes up to 32 GPS roaming zones.
2540000h	Zone Names
2540000h	Zone Names
2580000h	Radio Ids
25c0000h	FM Quick Call Bank
25c0100h	Status Messages
25c0500h	Hot-Key Settings
25c0b00h	Status Message Bitmap Element
25c0b10h	Group List Bitmap Element
25c0c00h	ARC4 encryption keys
25c1c00h	ARC4 key bitmap
2600000h	Valid contact indices	Some weird contact index map, containing the indices of up to 10000 valid contacts.
2640000h	Contact Bitmap Element
2680000h	Contact banks
2900000h	Analog Contact Index List
2900100h	Analog Contact ByteMap
2940000h	Analog Contacts
2980000h	Group List Bank
2bc0000h	Air Band Channel Bank
2bc1000h	Air Band VFO Channel
2bc1020h	Air Band Channel Bitmap
2bc1040h	Air Band Scan Enable Bitmap
4000000h	Call-sign Index Banks
4800000h	Contact Map
4840000h	Call-sign Database Limits
5500000h	Call-sign DB Banks

585 Channel banks v1.21done

Between 1 and 32 repetitions of Channel Bank.

A sparse series of channel banks.

586 Channel Bank v1.21done

Between 1 and 128 repetitions of Channel.

A single channel bank, holding up to 128 Channels.

587 Channel v1.21done

Element of size 40h.

Encodes a single FM or DMR channel.

RX Frequency

At address 0h: 32-bit bcd big-endian integer value (bcd8be).

Specifies the reception frequency.

Frequency is specified in 10Hz.

TX Frequency Offset

At address 4h: 32-bit bcd big-endian integer value (bcd8be).

Specifies the transmit frequency offset.

The frequency is stored in 10Hz. The offset direction is stored separately.

Repeater direction Rep Dir

At address 8h:7: Enumeration of size 0h:2, with 3 options. Specifies the offset direction for the repeater mode.

Value	Name	Description
0	Simplex	RX = TX Frequency
1	Positive	TX = RX + Offset
2	Negative	TX = RX - Offset

Bandwidth BndWdt

At address 8h:5: Enumeration of size 0h:2, with 2 options. Specifies the bandwidth of the FM channel. DMR channels are always 12.5kHz wide.

Value	Name	Description
0	Narrow (12.5kHz)
1	Wide (25kHz)

Transmit power PWR

At address 8h:3: Enumeration of size 0h:2, with 4 options. Specifies the transmit power of the channel.

Value	Name	Description
0	Low
1	Medium
2	High
3	Turbo

Channel mode Mode

At address 8h:1: Enumeration of size 0h:2, with 4 options. Specifies the mode of the channel.

Value	Name	Description
0	FM
1	DMR
2	FM + DMR RX
3	DMR + FM RX

Enable talkaround TlkAr

At address 9h:7: boolean value. Default value 0h.

Call confirm ClCnf

At address 9h:6: boolean value. Default value 0h.

Enable RX only RXO

At address 9h:5: boolean value. Default value 0h.

If enabled, no transmission is possible on this channel.

Swap RX/TX frequencies sw Rx/Tx

At address 9h:4: boolean value. Default value 0h.

Also swaps signaling.

Enable TX DCS TxDcs

At address 9h:3: boolean value. Default value 0h.

Enable TX CTCSS TxCtc

At address 9h:2: boolean value.

Enable RX DCS RxDcs

At address 9h:1: boolean value. Default value 0h.

Enable RX CTCSS RxCtc

At address 9h:0: boolean value. Default value 0h.

TX Tone CTCSS

At address ah: Enumeration of size 1h, with 51 options.

Value	Name	Description
0	62.5 Hz
1	67.0 Hz
2	69.3 Hz
3	71.9 Hz
4	74.4 Hz
5	77.0 Hz
6	79.7 Hz
7	82.5 Hz
8	85.4 Hz
9	88.5 Hz
10	91.5 Hz
11	94.8 Hz
12	97.4 Hz
13	100.0 Hz
14	103.5 Hz
15	107.2 Hz
16	110.9 Hz
17	114.8 Hz
18	118.8 Hz
19	123.0 Hz
20	127.3 Hz
21	131.8 Hz
22	136.5 Hz
23	141.3 Hz
24	146.2 Hz
25	151.4 Hz
26	156.7 Hz
27	159.8 Hz
28	162.2 Hz
29	165.5 Hz
30	167.9 Hz
31	171.3 Hz
32	173.8 Hz
33	177.3 Hz
34	179.9 Hz
35	183.5 Hz
36	186.2 Hz
37	189.9 Hz
38	192.8 Hz
39	196.6 Hz
40	199.5 Hz
41	203.5 Hz
42	206.5 Hz
43	210.7 Hz
44	218.1 Hz
45	225.7 Hz
46	229.1 Hz
47	233.6 Hz
48	241.8 Hz
49	250.3 Hz
50	254.1 Hz

RX Tone CTCSS

At address bh: Enumeration of size 1h, with 51 options.

Value	Name	Description
0	62.5 Hz
1	67.0 Hz
2	69.3 Hz
3	71.9 Hz
4	74.4 Hz
5	77.0 Hz
6	79.7 Hz
7	82.5 Hz
8	85.4 Hz
9	88.5 Hz
10	91.5 Hz
11	94.8 Hz
12	97.4 Hz
13	100.0 Hz
14	103.5 Hz
15	107.2 Hz
16	110.9 Hz
17	114.8 Hz
18	118.8 Hz
19	123.0 Hz
20	127.3 Hz
21	131.8 Hz
22	136.5 Hz
23	141.3 Hz
24	146.2 Hz
25	151.4 Hz
26	156.7 Hz
27	159.8 Hz
28	162.2 Hz
29	165.5 Hz
30	167.9 Hz
31	171.3 Hz
32	173.8 Hz
33	177.3 Hz
34	179.9 Hz
35	183.5 Hz
36	186.2 Hz
37	189.9 Hz
38	192.8 Hz
39	196.6 Hz
40	199.5 Hz
41	203.5 Hz
42	206.5 Hz
43	210.7 Hz
44	218.1 Hz
45	225.7 Hz
46	229.1 Hz
47	233.6 Hz
48	241.8 Hz
49	250.3 Hz
50	254.1 Hz

TX DCS code

At address ch: 16-bit unsigned little-endian integer value (uint16le). Default value 0h.

Encodes the DCS code in a complex way.

The least significant 9 bits encode the binary DCS code. The 9th bit encodes the inversion flag.

RX DCS code

At address eh: 16-bit unsigned little-endian integer value (uint16le). Default value 0h.

Encodes the DCS code in a complex way.

The least significant 9 bits encode the binary DCS code. The 9th bit encodes the inversion flag.

Custom CTCSS frequency

At address 10h: 16-bit signed little-endian integer value (int16le). Default value 0h.

Specifies a custom CTCSS frequency in 0.1Hz.

Two-tone decode index

At address 12h: 16-bit unsigned little-endian integer value (uint16le). Default value 0h.

Specifies the two-tone decode index.

Transmit contact index

At address 14h: 32-bit unsigned little-endian integer value (uint32le). Default value 0h.

Contact index, 0-based.

Radio ID index

At address 18h: 8-bit unsigned integer value (uint8). Default value 0h.

Unknown data

At address 19h: Unknown data of size 0h:1.

Squelch Mode

At address 19h:6: Enumeration of size 0h:3, with 4 options.

Value	Name	Description
0	Carrier
1	CTCSS/DSC
2	Optional Signaling
3	CTCSS/DSC and Optional Signaling

Unknown data

At address 19h:3: Unknown data of size 0h:2.

FM PTT ID transmission mode TX PTT ID

At address 19h:1: Enumeration of size 0h:2, with 4 options. Specifies when to transmit the FM PTT id.

Value	Name	Description
0	Off
1	Start
2	End
3	Both

Unknown data

At address 1ah: Unknown data of size 0h:2.

Optional Signaling Opt Sig

At address 1ah:5: Enumeration of size 0h:2, with 4 options.

Value	Name	Description
0	Off
1	DTMF
2	two-tone
3	five-tone

Unknown data

At address 1ah:3: Unknown data of size 0h:2.

Admit Criterium Adm Crit

At address 1ah:1: Enumeration of size 0h:2, with 4 options. This is a mess. Similar admid criteria for FM and DMR are encoded differently. E.g., channel free and different CC/tone.

Value	Name	Description
0	Always
1	Channel Free	DMR: channel Free, FM: different CTCSS/DCS tone.
2	Different color code	DMR: different CC; FM: channel free
3	Same color code

Scan list index

At address 1bh: 8-bit unsigned integer value (uint8). Default value 0h.

Scan list index, 0-based. 0xff = None

None = 0xff.

Group List index

At address 1ch: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the group list 0-based index. 0xff = None.

A 0-based index of the group list. If not set, 0xff.

Two-tone Id Index

At address 1dh: 8-bit unsigned integer value (uint8).

0-based index.

Five-tone Id Index

At address 1eh: 8-bit unsigned integer value (uint8).

0-based index.

DTMF Id Index

At address 1fh: 8-bit unsigned integer value (uint8).

0-based.

Colorcode

At address 20h: 8-bit unsigned integer value (uint8).

Enable Lone Worker LWk

At address 21h:7: boolean value. Default value 0h.

Unknown data

At address 21h:6: Unknown data of size 0h:1.

Enable APRS RX APRSr

At address 21h:5: boolean value.

Enable Adaptive TDMA aTDMA

At address 21h:4: boolean value. Default value 0h.

DCMA mode

At address 21h:3: Enumeration of size 0h:2, with 3 options.

Value	Name	Description
0	Off
1	DCMA Double Slot
2	DCMA Sinlge Slot

Enable SMS Confirmation SMS ACK

At address 21h:1: boolean value. Default value 0h.

Time Slot TS

At address 21h:0: Enumeration of size 0h:1, with 2 options.

Value	Name	Description
0	Time Slot 1
1	Time Slot 2

AES encryption key index

At address 22h: 8-bit unsigned integer value (uint8). Default value 0h.

Index + 1, 0=Off.

Name

At address 23h: ASCII string of length (up to) 16 chars, 00h-padded.

Pad Byte

At address 33h: Unused data of size 1h: 00

Unknown data

At address 34h: Unknown data of size 0h:1.

Exclude Channel from Roaming nRoam

At address 34h:6: boolean value. Default value 0h.

If enabled, the channel gets excluded from roaming.

Interrupt Priority IntPri

At address 34h:5: Enumeration of size 0h:2, with 3 options.

Value	Name	Description
0	None
1	Low
2	High

Enable Noise Reduction NoiseRed

At address 34h:3: boolean value. Default value 0h.

Enable Bluetooth BT

At address 34h:2: boolean value. Default value 0h.

Enable Simplex Smplx

At address 34h:1: boolean value. Default value 0h.

Enables the simplex mode.

That is, RX = TX frequency.

Enable ranging Rngng

At address 34h:0: boolean value.

APRS Type

At address 35h: Enumeration of size 1h, with 3 options.

Value	Name	Description
0	None
1	FM ARPS
2	DMR APRS

FM APRS PTT mode

At address 36h: Enumeration of size 1h, with 3 options.

Value	Name	Description
0	Off
1	Start of transmission
2	End of transmission

DMR APRS PTT mode

At address 37h: Enumeration of size 1h, with 2 options.

Value	Name	Description
0	Off
1	On

DMR APRS channel index

At address 38h: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the 0-based DMR APRS channel setting index. A value in [0,7].

Frequency correction

At address 39h: 8-bit signed integer value (int8).

Specifies the frequency correction in multiples of 10Hz.

FM Scambler

At address 3ah: Enumeration of size 1h, with 13 options.

Value	Name	Description
0	Off
1	3.3k
2	3.2k
3	3.1k
4	3.0k
5	2.9k
6	2.8k
7	2.7k
8	2.6k
9	2.5k
10	4.095k
11	3.458k
12	Custom

Custom Scrambler

At address 3bh: Enumeration of size 1h, with 29 options.

Value	Name	Description
0	1.3k
1	1.4k
2	1.5k
3	1.6k
4	1.7k
5	1.8k
6	1.9k
7	2.0k
8	2.1k
9	2.2k
10	2.3k
11	2.4k
12	2.5k
13	2.6k
14	2.7k
15	2.8k
16	2.9k
17	3.0k
18	3.1k
19	3.2k
20	3.3k
21	3.4k
22	3.5k
23	3.6k
24	3.7k
25	3.8k
26	3.9k
27	4.0k
28	4.1k

Unknown data

At address 3ch: Unknown data of size 1h.

Unknown data

At address 3dh: Unknown data of size 0h:1.

Advanced Encryption Type advEnc

At address 3dh:6: Enumeration of size 0h:1, with 2 options. Only relevant, if advanced encryption is enabled.

Value	Name	Description
0	AES
1	ARC4

Send Talker Alias TxAlias

At address 3dh:5: boolean value. Default value 0h.

Auto Scan ASc

At address 3dh:4: boolean value. Default value 0h.

Enables auto scan.

Disable Data ACK dACK

At address 3dh:3: boolean value. Default value 0h.

Disables data ACK.

Disable RX SMS nSMS

At address 3dh:2: boolean value. Default value 0h.

Enable Random Encryption Key RandKey

At address 3dh:1: boolean value. Default value 0h.

Enable Multiple Encryption Keys MulKey

At address 3dh:0: boolean value. Default value 1h.

FM ARPS Frequency Index

At address 3eh: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the 0-based index of the FM APRS frequency.

ARC4 Key Index

At address 3fh: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the ARC4 key index (if ARC4 is enabled).

Valid values are 1-255, 0=Off.

588 Channel extension banks v1.21done

Between 1 and 32 repetitions of Channel extension bank.

A series of channel extension banks corresponding to each encoded channel bank.

589 Channel extension bank v1.21done

Between 1 and 128 repetitions of Channel extension.

Encodes several channel extensions corresponding to each encoded channel.

590 Channel extension v1.21done

Element of size 40h.

Encodes additional channel information.

5 Tone PTT ID index BOT

At address 0h: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the index of the begin-of-transmission 5 tone PTT ID to send.

5 Tone PTT ID index EOT

At address 1h: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the index of the 5 tone end-of-transmission PTT ID to send.

Unknown data

At address 2h: Unknown data of size 3eh.

591 VFO Channels v1.21done

Exactly 2 repetitions of VFO Channel.

592 VFO Channel v1.21done

Element of size 40h.

Encodes a single FM or DMR VFO channel.

RX Frequency

At address 0h: 32-bit bcd big-endian integer value (bcd8be).

Specifies the reception frequency.

Frequency is specified in 10Hz.

TX Frequency Offset

At address 4h: 32-bit bcd big-endian integer value (bcd8be).

Specifies the transmit frequency offset.

The frequency is stored in 10Hz. The offset direction is stored separately.

Repeater direction

At address 8h:7: Enumeration of size 0h:2, with 3 options. Specifies the offset direction for the repeater mode.

Value	Name	Description
0	Simplex	RX = TX Frequency
1	Positive	TX = RX + Offset
2	Negative	TX = RX - Offset

Bandwidth

At address 8h:5: Enumeration of size 0h:2, with 2 options. Specifies the bandwidth of the FM channel. DMR channels are always 12.5kHz wide.

Value	Name	Description
0	Narrow (12.5kHz)
1	Wide (25kHz)

Transmit power

At address 8h:3: Enumeration of size 0h:2, with 4 options. Specifies the transmit power of the channel.

Value	Name	Description
0	Low
1	Medium
2	High
3	Turbo

Channel mode

At address 8h:1: Enumeration of size 0h:2, with 4 options. Specifies the mode of the channel.

Value	Name	Description
0	FM
1	DMR
2	FM + DMR RX
3	DMR + FM RX

Enable talkaround TlkAr

At address 9h:7: boolean value. Default value 0h.

Call confirm

At address 9h:6: boolean value. Default value 0h.

Enable RX only RXO

At address 9h:5: boolean value. Default value 0h.

If enabled, no transmission is possible on this channel.

Swap RX/TX frequencies

At address 9h:4: boolean value. Default value 0h.

Also swaps signaling.

Enable TX DCS

At address 9h:3: boolean value. Default value 0h.

Enable TX CTCSS

At address 9h:2: boolean value.

Enable RX DCS

At address 9h:1: boolean value. Default value 0h.

Enable RX CTCSS

At address 9h:0: boolean value. Default value 0h.

TX Tone CTCSS

At address ah: Enumeration of size 1h, with 51 options.

Value	Name	Description
0	62.5 Hz
1	67.0 Hz
2	69.3 Hz
3	71.9 Hz
4	74.4 Hz
5	77.0 Hz
6	79.7 Hz
7	82.5 Hz
8	85.4 Hz
9	88.5 Hz
10	91.5 Hz
11	94.8 Hz
12	97.4 Hz
13	100.0 Hz
14	103.5 Hz
15	107.2 Hz
16	110.9 Hz
17	114.8 Hz
18	118.8 Hz
19	123.0 Hz
20	127.3 Hz
21	131.8 Hz
22	136.5 Hz
23	141.3 Hz
24	146.2 Hz
25	151.4 Hz
26	156.7 Hz
27	159.8 Hz
28	162.2 Hz
29	165.5 Hz
30	167.9 Hz
31	171.3 Hz
32	173.8 Hz
33	177.3 Hz
34	179.9 Hz
35	183.5 Hz
36	186.2 Hz
37	189.9 Hz
38	192.8 Hz
39	196.6 Hz
40	199.5 Hz
41	203.5 Hz
42	206.5 Hz
43	210.7 Hz
44	218.1 Hz
45	225.7 Hz
46	229.1 Hz
47	233.6 Hz
48	241.8 Hz
49	250.3 Hz
50	254.1 Hz

RX Tone CTCSS

At address bh: Enumeration of size 1h, with 51 options.

Value	Name	Description
0	62.5 Hz
1	67.0 Hz
2	69.3 Hz
3	71.9 Hz
4	74.4 Hz
5	77.0 Hz
6	79.7 Hz
7	82.5 Hz
8	85.4 Hz
9	88.5 Hz
10	91.5 Hz
11	94.8 Hz
12	97.4 Hz
13	100.0 Hz
14	103.5 Hz
15	107.2 Hz
16	110.9 Hz
17	114.8 Hz
18	118.8 Hz
19	123.0 Hz
20	127.3 Hz
21	131.8 Hz
22	136.5 Hz
23	141.3 Hz
24	146.2 Hz
25	151.4 Hz
26	156.7 Hz
27	159.8 Hz
28	162.2 Hz
29	165.5 Hz
30	167.9 Hz
31	171.3 Hz
32	173.8 Hz
33	177.3 Hz
34	179.9 Hz
35	183.5 Hz
36	186.2 Hz
37	189.9 Hz
38	192.8 Hz
39	196.6 Hz
40	199.5 Hz
41	203.5 Hz
42	206.5 Hz
43	210.7 Hz
44	218.1 Hz
45	225.7 Hz
46	229.1 Hz
47	233.6 Hz
48	241.8 Hz
49	250.3 Hz
50	254.1 Hz

TX DCS code

At address ch: 16-bit unsigned little-endian integer value (uint16le). Default value 0h.

Encodes the DCS code in a complex way.

The least significant 9 bits encode the binary DCS code. The 9th bit encodes the inversion flag.

RX DCS code

At address eh: 16-bit unsigned little-endian integer value (uint16le). Default value 0h.

Encodes the DCS code in a complex way.

The least significant 9 bits encode the binary DCS code. The 9th bit encodes the inversion flag.

Custom CTCSS frequency

At address 10h: 16-bit signed little-endian integer value (int16le). Default value 0h.

Specifies a custom CTCSS frequency in 0.1Hz.

Two-tone decode index

At address 12h: 16-bit unsigned little-endian integer value (uint16le). Default value 0h.

Specifies the two-tone decode index.

Transmit contact index

At address 14h: 32-bit unsigned little-endian integer value (uint32le). Default value 0h.

Contact index, 0-based.

Radio ID index

At address 18h: 8-bit unsigned integer value (uint8). Default value 0h.

Unknown data

At address 19h: Unknown data of size 0h:2.

Squelch Mode

At address 19h:5: Enumeration of size 0h:1, with 2 options.

Value	Name	Description
0	Carrier
1	Optional Signaling

Unknown data

At address 19h:4: Unknown data of size 0h:3.

FM PTT ID transmission mode TX PTT ID

At address 19h:1: Enumeration of size 0h:2, with 4 options. Specifies when to transmit the FM PTT id.

Value	Name	Description
0	Off
1	Start
2	End
3	Both

Unknown data

At address 1ah: Unknown data of size 0h:2.

Optional Signaling

At address 1ah:5: Enumeration of size 0h:2, with 4 options.

Value	Name	Description
0	Off
1	DTMF
2	two-tone
3	five-tone

Unknown data

At address 1ah:3: Unknown data of size 0h:2.

Admit Criterium

At address 1ah:1: Enumeration of size 0h:2, with 4 options. This is a mess. Similar admid criteria for FM and DMR are encoded differently. E.g., channel free and different CC/tone.

Value	Name	Description
0	Always
1	Channel Free	DMR: channel Free, FM: different CTCSS/DCS tone.
2	Different color code	DMR: different CC; FM: channel free
3	Same color code

Scan list index

At address 1bh: 8-bit unsigned integer value (uint8). Default value 0h.

Scan list index, 0-based. 0xff = None

None = 0xff.

Group List index

At address 1ch: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the group list 0-based index. 0xff = None.

A 0-based index of the group list. If not set, 0xff.

Two-tone Id Index

At address 1dh: 8-bit unsigned integer value (uint8).

0-based index.

Five-tone Id Index

At address 1eh: 8-bit unsigned integer value (uint8).

0-based index.

DTMF Id Index

At address 1fh: 8-bit unsigned integer value (uint8).

0-based.

Colorcode

At address 20h: 8-bit unsigned integer value (uint8).

Enable Lone Worker LWk

At address 21h:7: boolean value. Default value 0h.

Unknown data

At address 21h:6: Unknown data of size 0h:1.

Enable APRS RX APRSr

At address 21h:5: boolean value.

Enable Adaptive TDMA

At address 21h:4: boolean value. Default value 0h.

DCMA mode

At address 21h:3: Enumeration of size 0h:2, with 3 options.

Value	Name	Description
0	Off
1	DCMA Double Slot
2	DCMA Sinlge Slot

Enable SMS Confirmation SMS ACK

At address 21h:1: boolean value. Default value 0h.

Time Slot

At address 21h:0: Enumeration of size 0h:1, with 2 options.

Value	Name	Description
0	Time Slot 1
1	Time Slot 2

AES encryption key index

At address 22h: 8-bit unsigned integer value (uint8). Default value 0h.

Index + 1, 0=Off.

Name

At address 23h: ASCII string of length (up to) 16 chars, 00h-padded.

Pad Byte

At address 33h: Unused data of size 1h: 00

Unknown data

At address 34h: Unknown data of size 0h:1.

Exclude Channel from Roaming xclRoam

At address 34h:6: boolean value. Default value 0h.

If enabled, the channel gets excluded from roaming.

Interrupt Priority IntPri

At address 34h:5: Enumeration of size 0h:2, with 3 options.

Value	Name	Description
0	None
1	Low
2	High

Enable Noise Reduction NoiseRed

At address 34h:3: boolean value. Default value 0h.

Enable Bluetooth BT

At address 34h:2: boolean value. Default value 0h.

Enable Simplex Smplx

At address 34h:1: boolean value. Default value 0h.

Enables the simplex mode.

That is, RX = TX frequency.

Enable ranging Rngng

At address 34h:0: boolean value.

APRS Type

At address 35h: Enumeration of size 1h, with 3 options.

Value	Name	Description
0	None
1	FM ARPS
2	DMR APRS

FM APRS PTT mode

At address 36h: Enumeration of size 1h, with 3 options.

Value	Name	Description
0	Off
1	Start of transmission
2	End of transmission

DMR APRS PTT mode

At address 37h: Enumeration of size 1h, with 2 options.

Value	Name	Description
0	Off
1	On

DMR APRS channel index

At address 38h: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the 0-based DMR APRS channel setting index. A value in [0,7].

Frequency correction

At address 39h: 8-bit signed integer value (int8).

Specifies the frequency correction in multiples of 10Hz.

FM Scambler

At address 3ah: Enumeration of size 1h, with 13 options.

Value	Name	Description
0	Off
1	3.3k
2	3.2k
3	3.1k
4	3.0k
5	2.9k
6	2.8k
7	2.7k
8	2.6k
9	2.5k
10	4.095k
11	3.458k
12	Custom

Custom Scrambler

At address 3bh: Enumeration of size 1h, with 29 options.

Value	Name	Description
0	1.3k
1	1.4k
2	1.5k
3	1.6k
4	1.7k
5	1.8k
6	1.9k
7	2.0k
8	2.1k
9	2.2k
10	2.3k
11	2.4k
12	2.5k
13	2.6k
14	2.7k
15	2.8k
16	2.9k
17	3.0k
18	3.1k
19	3.2k
20	3.3k
21	3.4k
22	3.5k
23	3.6k
24	3.7k
25	3.8k
26	3.9k
27	4.0k
28	4.1k

Unknown data

At address 3ch: Unknown data of size 1h.

Unknown data

At address 3dh: Unknown data of size 0h:1.

Advanced Encryption Type

At address 3dh:6: Enumeration of size 0h:1, with 2 options. Only relevant, if advanced encryption is enabled.

Value	Name	Description
0	AES
1	ARC4

Send Talker Alias TxAlias

At address 3dh:5: boolean value. Default value 0h.

Auto Scan

At address 3dh:4: boolean value. Default value 0h.

Enables auto scan.

Disable Data ACK dACK

At address 3dh:3: boolean value. Default value 0h.

Disables data ACK.

Disable RX SMS

At address 3dh:2: boolean value. Default value 0h.

Enable Random Encryption Key RandKey

At address 3dh:1: boolean value. Default value 0h.

Enable Multiple Encryption Keys MulKey

At address 3dh:0: boolean value. Default value 1h.

FM ARPS Frequency Index

At address 3eh: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the 0-based index of the FM APRS frequency.

ARC4 Key Index

At address 3fh: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the ARC4 key index (if ARC4 is enabled).

Valid values are 1-255, 0=Off.

593 VFO Channel Extensions

Exactly 2 repetitions of VFO Channel extension.

594 VFO Channel extension v1.21done

Element of size 40h.

Encodes additional channel information.

5 Tone PTT ID index BOT

At address 0h: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the index of the begin-of-transmission 5 tone PTT ID to send.

5 Tone PTT ID index EOT

At address 1h: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the index of the 5 tone end-of-transmission PTT ID to send.

Unknown data

At address 2h: Unknown data of size 3eh.

595 Zone channel lists. v1.21done

Between 1 and 250 repetitions of Zone channel list.

596 Zone channel list v1.21done

Element of size 200h.

596.1 Zone channel indices v1.21done

Exactly 250 repetitions of Channel index.

A fixed sized list of channel indices for the zone.

Channel index

16-bit unsigned little-endian integer value (uint16le). Default value ffffh.

Specifies the 0-based channel index.

If unset, value is ffffh.

Unused data

At address 1f4h: Unused data of size ch: ff

597 Roaming channel bank v1.21done

Up to 250 repetitions of Roaming channel.

Encodes a bank of up to 250 roaming channels.

598 Roaming channel v1.21done

Element of size 20h.

Encodes a single roaming channel.

RX frequency

At address 0h: 32-bit bcd big-endian integer value (bcd8be).

Specifies the RX frequency.

The frequency is stored in multiples of 10Hz.

TX frequency

At address 4h: 32-bit bcd big-endian integer value (bcd8be).

Encodes the transmit frequency.

The frequency is encoded in multiples of 10Hz.

Color code override

At address 8h: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the color code to override the current channels setting with.

If set to 16 (10h), there is no override.

Time slot override

At address 9h: Enumeration of size 1h, with 3 options. Specifies if and how the current channels time slot gets overridden.

Value	Name	Description
0	Time Slot 1
1	Time Slot 2
2	None	If selected, the current channels time slot will not be overridden.

Name

At address ah: ASCII string of length (up to) 16 chars, 00h-padded.

Unused data

At address 1ah: Unused data of size 6h: 00

599 Roaming channel bitmap v1.21done

Element at address 1042000h of size 20h.

599.1 Roaming channel bits v1.21done

Exactly 250 repetitions of Roaming channel bit.

Roaming channel bit

boolean value. Default value 0h.

Single bit encoding whether a roaming channel is valid.

Unused data

At address 1fh:5: Unused data of size 0h:6: 00

600 Roaming zone bitmap v1.21done

Element at address 1042080h of size 10h.

600.1 Roaming zone bits v1.21done

Exactly 64 repetitions of Roaming zone enable bit.

Roaming zone enable bit

boolean value. Default value 0h.

Enables a single roaming zone.

Unused data

At address 8h: Unused data of size 8h: 00

601 Roaming zone bank v1.21done

Up to 64 repetitions of Roaming zone.

A collection of up to 64 roaming zones.

602 Roaming zone v1.21done

Element of size 80h.

Encodes a single roaming.

602.1 Roaming channel indices v1.21done

Exactly 64 repetitions of Roaming channel index.

Roaming channel index

8-bit unsigned integer value (uint8).

0-based index.

If set to 0xff, disabled.

Name

At address 40h: ASCII string of length (up to) 16 chars, 00h-padded. Specifies the name of the roaming zone.

Unused data

At address 50h: Unused data of size 30h: 00

603 Scan list banks v1.21done

Up to 16 repetitions of Scan list bank.

604 Scan list bank v1.21done

Between 1 and 250 repetitions of Scan List.

605 Scan List v1.21done

Element of size 90h.

Unused data

At address 0h: Unused data of size 1h:

Priority Channel

At address 1h: Enumeration of size 1h, with 4 options.

Value	Name	Description
0	Off
1	Primary
2	Secondary
3	Both

Primary Priority Channel Index

At address 2h: 16-bit unsigned little-endian integer value (uint16le). Default value 0h.

Index +1, 0=selected. ffff=none.

Secondary Priority Channel Index

At address 4h: 16-bit unsigned little-endian integer value (uint16le). Default value ffffh.

Index +1, 0=selected, ffff=none

Primary Look Back Time

At address 6h: 16-bit unsigned little-endian integer value (uint16le).

in 10sec.

Secondary Look Back Time

At address 8h: 16-bit unsigned little-endian integer value (uint16le). Default value 0h.

in 10sec.

Dropout delay

At address ah: 16-bit unsigned little-endian integer value (uint16le).

in 10sec.

Dwell time

At address ch: 16-bit unsigned little-endian integer value (uint16le).

in 10sec.

Revert Channel Type

At address eh: Enumeration of size 1h, with 8 options.

Value	Name	Description
0	Selected Channel
1	Selected + Active Channel
2	Primary Channel
3	Secondary Channel
4	Last Called
5	Last Used
6	Primary + Active Channel
7	Secondary + Active Channel

Name

At address fh: ASCII string of length (up to) 16 chars, 00h-padded.

Pad Byte

At address 1fh: Unused data of size 1h: 00

605.1 Channel Indices v1.21done

Exactly 50 repetitions of Channel Index.

Channel Index

16-bit unsigned little-endian integer value (uint16le). Default value 0h.

Index 0-based, ffffh=disabled

Unused data

At address 84h: Unused data of size ch: 00

606 Message linked list v1.21done

Up to 100 repetitions of List element.

607 List element v1.21done

Element of size 10h.

Unused data

At address 0h: Unused data of size 2h:

Next index

At address 2h: 8-bit unsigned integer value (uint8).

Current index

At address 3h: 8-bit unsigned integer value (uint8).

Unused data

At address 4h: Unused data of size ch:

608 Message byte-map v1.21done

Element at address 1640800h of size 90h.

608.1 Message enabled bytes v1.21done

Exactly 100 repetitions of Message enable byte.

Message enable byte

Enumeration of size 1h, with 2 options. Enables a specific message.

Value	Name	Description
0	Valid
255	Invalid

Unused data

At address 64h: Unused data of size 2ch:

609 Message banks v1.21done

Up to 13 repetitions of Message bank.

610 Message bank v1.21done

Between 1 and 8 repetitions of Message.

611 Message v1.21done

Element of size 100h.

Message text

At address 0h: ASCII string of length (up to) 99 chars, 00h-padded.

Unused data

At address 63h: Unused data of size 9dh:

612 FM broadcast channel frequencies v1.21done

Up to 100 repetitions of Channel frequency.

Channel frequency

32-bit bcd big-endian integer value (bcd8be).

Specified in multiples of 100Hz

613 FM broadcast VFO frequency v1.21done

Element at address 2480200h of size 10h.

VFO frequency

At address 0h: 32-bit bcd big-endian integer value (bcd8be).

Specified in multiples of 100Hz

Unused data

At address 4h: Unused data of size ch:

614 FM broadcast channel bitmap v1.21done

Element at address 2480210h of size 10h.

614.1 FM broadcast channel bits v1.21done

Exactly 100 repetitions of Channel bit.

Channel bit

boolean value.

Unused data

At address ch:3: Unused data of size 3h:4:

615 FM broadcast channel scan bitmap v1.21done

Element at address 2480220h of size 10h.

615.1 FM broadcast channel scan bits v1.21done

Exactly 100 repetitions of Channel bit.

Channel bit

boolean value.

Unused data

At address ch:3: Unused data of size 3h:4:

616 5-Tone IDs v1.21done

Up to 100 repetitions of 5-tone ID.

617 5-tone ID v1.21done

Element of size 20h.

Unused data

At address 0h: Unused data of size 1h:

Standard

At address 1h: Enumeration of size 1h, with 15 options.

Value	Name	Description
0	ZVEI1
1	ZVEI2
2	ZVEI3
3	PZVEI
4	DZVEI
5	PDZVEI
6	CCIR1
7	CCIR2
8	PCCIR
9	EEA
10	Euro Signal
11	NATEL
12	MODAT
13	CCITT
14	EIA

ID length

At address 2h: 8-bit signed integer value (int8).

Tone duration

At address 3h: 8-bit signed integer value (int8). Default value 0h.

Duration is encoded in ms. Valid values are 30ms - 100ms.

617.1 ID v1.21done

Exactly 40 repetitions of Digit.

Up to 40 digits

Digit

4-bit unsigned integer value (uint4). Default value 0h.

Encodes a single ID digit.

Name

At address 18h: ASCII string of length (up to) 7 chars, 20h-padded.

Pad Byte

At address 1fh: Unused data of size 1h: 00

618 5-Tone Id bitmap v1.21done

Element at address 24c0c80h of size 10h.

618.1 5-tone id bits v1.21done

Exactly 100 repetitions of 5-tone id bit.

5-tone id bit

boolean value.

Unused data

At address ch:3: Unused data of size 3h:4:

619 5-tone functions v1.21done

Exactly 16 repetitions of 5-tone function.

620 5-tone function v1.21done

Element of size 1bh.

Function

At address 0h: Enumeration of size 1h, with 7 options.

Value	Name	Description
0	Open squelch
1	Call all
2	Emergency alarm
3	Remote kill
4	Remote stun
5	Remote wakeup
6	Group call

ID length

At address 1h: 8-bit signed integer value (int8).

ID

At address 2h: 96-bit signed little-endian integer value (int96le).

Name

At address eh: ASCII string of length (up to) 7 chars, 20h-padded.

Unused data

At address 15h: Unused data of size 6h:

621 5-Tone settings v1.21done

Element at address 24c1000h of size 80h.

Unknown data

At address 0h: Unknown data of size 20h.

Unused data

At address 20h: Unused data of size 1h:

Decoing response

At address 21h: Enumeration of size 1h, with 3 options.

Value	Name	Description
0	None
1	Tone
2	Tone and respond

Decoding standard

At address 22h: Enumeration of size 1h, with 15 options.

Value	Name	Description
0	ZVEI1
1	ZVEI2
2	ZVEI3
3	PZVEI
4	DZVEI
5	PDZVEI
6	CCIR1
7	CCIR2
8	PCCIR
9	EEA
10	Euro Signal
11	NATEL
12	MODAT
13	CCITT
14	EIA

Radio ID length

At address 23h: 8-bit signed integer value (int8).

Decoding tone duration in ms

At address 24h: 8-bit signed integer value (int8).

Radio ID

At address 25h: 56-bit signed little-endian integer value (int56le).

Post encode delay in 10ms

At address 2ch: 8-bit signed integer value (int8).

PTT ID 0=off, [5,75]

At address 2dh: 8-bit signed integer value (int8).

Auto reset time in 10s

At address 2eh: 8-bit signed integer value (int8).

First delay in 10ms

At address 2fh: 8-bit signed integer value (int8).

Sidetone enable

At address 30h: Enumeration of size 1h, with 2 options.

Value	Name	Description
0
1

Unused data

At address 31h: Unused data of size 1h: 00

Stop code

At address 32h: 8-bit signed integer value (int8).

Stop time in 10ms

At address 33h: 8-bit signed integer value (int8).

Decode time in 10ms

At address 34h: 8-bit signed integer value (int8).

Delay after stop in 10ms

At address 35h: 8-bit signed integer value (int8).

Pre-time in 10ms

At address 36h: 8-bit signed integer value (int8).

Unused data

At address 37h: Unused data of size 6h:

BOT standard

At address 3dh: Enumeration of size 1h, with 15 options.

Value	Name	Description
0	ZVEI1
1	ZVEI2
2	ZVEI3
3	PZVEI
4	DZVEI
5	PDZVEI
6	CCIR1
7	CCIR2
8	PCCIR
9	EEA
10	Euro Signal
11	NATEL
12	MODAT
13	CCITT
14	EIA

BOT ID length

At address 3eh: 8-bit signed integer value (int8).

BOT tone duration in ms

At address 3fh: 8-bit signed integer value (int8).

BOT ID

At address 40h: 96-bit signed little-endian integer value (int96le).

Unused data

At address 4ch: Unused data of size 11h:

EOT standard

At address 5dh: Enumeration of size 1h, with 15 options.

Value	Name	Description
0	ZVEI1
1	ZVEI2
2	ZVEI3
3	PZVEI
4	DZVEI
5	PDZVEI
6	CCIR1
7	CCIR2
8	PCCIR
9	EEA
10	Euro Signal
11	NATEL
12	MODAT
13	CCITT
14	EIA

EOT ID length

At address 5eh: 8-bit signed integer value (int8).

EOT tone duration in ms

At address 5fh: 8-bit signed integer value (int8).

EOT ID

At address 60h: 96-bit signed little-endian integer value (int96le).

Unused data

At address 6ch: Unused data of size 14h:

622 DTMF Settings v1.21done

Element at address 24c1080h of size 50h.

Symbol Interval

At address 0h: 8-bit unsigned integer value (uint8).

Valid values 0-15.

Group Code

At address 1h: 8-bit unsigned integer value (uint8).

Valid values 0-15

Response

At address 2h: Enumeration of size 1h, with 3 options.

Value	Name	Description
0	None
1	Tone
2	Tone + Respond

Tone Delay

At address 3h: 8-bit unsigned integer value (uint8).

Tone delay in 10ms.

First digit duration

At address 4h: 8-bit unsigned integer value (uint8).

Duration in 10ms.

Auto Reset Time

At address 5h: 8-bit unsigned integer value (uint8).

In multiple of 10s.

Radio ID

At address 6h: ASCII string of length (up to) 3 chars, 00h-padded.

Post-tone delay.

At address 9h: 8-bit unsigned integer value (uint8).

Delay in multiple of 10ms before EOT.

PTT Id Pause

At address ah: 8-bit unsigned integer value (uint8).

Pause between PTT Id transmissions in multiple of 10s.

PTT Id Enable

At address bh: 8-bit unsigned integer value (uint8).

D-Code Pause

At address ch: 8-bit unsigned integer value (uint8).

In seconds.

Side-tone enable

At address dh: 8-bit unsigned integer value (uint8).

Unused data

At address eh: Unused data of size 2h: 00 00

BOT Id

At address 10h: ASCII string of length (up to) 16 chars, FFh-padded.

EOT Id

At address 20h: ASCII string of length (up to) 16 chars, FFh-padded.

Remote kill Id

At address 30h: ASCII string of length (up to) 16 chars, FFh-padded.

Remote Stun Id

At address 40h: ASCII string of length (up to) 16 chars, FFh-padded.

623 2-Tone Ids v1.21done

Up to 24 repetitions of 2-Tone Id.

624 2-Tone Id v1.21done

Element of size 10h.

Encodes a single 2-tone id.

First tone frequency

At address 0h: 16-bit unsigned little-endian integer value (uint16le). Default value 0h.

Encodes the frequency in multiples of 0.1Hz.

Second tone frequency

At address 2h: 16-bit unsigned little-endian integer value (uint16le). Default value 0h.

Encodes the tone frequency in multiples of 0.1Hz.

Unused data

At address 4h: Unused data of size 4h: 00

Name

At address 8h: ASCII string of length (up to) 7 chars, 00h-padded. The name of the id.

Pad byte

At address fh: Unused data of size 1h: 00

625 2-Tone Id bitmap v1.21done

Element at address 24c1280h of size 10h.

Specifies, which 2-tone id is valid.

625.1 2-tone id enable bits v1.21done

Exactly 24 repetitions of 2-tone id enable bit.

2-tone id enable bit

boolean value. Default value 0h.

Unused data

At address 3h: Unused data of size dh: 00

626 2-Tone Settings v1.21done

Element at address 24c1290h of size 10h.

Unknown data

At address 0h: Unknown data of size 9h.

First tone duration

At address 9h: 8-bit unsigned integer value (uint8).

Encodes the first tone duration in multiples of 100ms. Valid values are 500-10000ms.

Second tone duration

At address ah: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the second tone duration in multiples of 100ms. Valid values are 500ms - 10000ms.

Long tone duration

At address bh: 8-bit unsigned integer value (uint8). Default value 0h.

Encodes the duration in terms of 100ms. Valid values are 500 - 10000ms.

Gap duration

At address ch: 8-bit unsigned integer value (uint8). Default value 0h.

Encodes the gap duration in multiples of 100ms. Valid values are 0 - 2000ms.

Reset period

At address dh: 8-bit unsigned integer value (uint8). Default value 0h.

Encodes the reset period in seconds. Valid values are 0 - 250s.

Side tone

At address eh:7: Enumeration of size 1h:1, with 2 options. Enables side tone.

Value	Name	Description
0	Off
1	On

Unknown data

At address fh:6: Unknown data of size 0h:7.

627 Zone Bitmap Element v1.21done

Element at address 24c1300h of size 20h.

627.1 Zone bitmap v1.21done

Exactly 250 repetitions of Zone enable bit.

Zone enable bit

boolean value. Default value 0h.

Unused data

At address 1fh:5: Unused data of size 0h:6: 00

628 Radio Id Bitmap Element v1.21done

Element at address 24c1320h of size 20h.

628.1 Radio Id Bitmap v1.21done

Exactly 250 repetitions of Radio Id Enable Bit.

Radio Id Enable Bit

boolean value. Default value 0h.

Unused data

At address 1fh:5: Unused data of size 0h:6:

629 Scan List Bitmap Element v1.21done

Element at address 24c1340h of size 20h.

629.1 Scan List Bitmap v1.21done

Exactly 250 repetitions of Scan List Enable Bit.

Scan List Enable Bit

boolean value.

Unused data

At address 1fh:5: Unused data of size 0h:6: 00

630 Hidden zone bitmap v1.21done

Element at address 24c1360h of size 20h.

630.1 Hidden zone bits v1.21done

Exactly 250 repetitions of Hidden zone bit.

Hidden zone bit

boolean value. Default value 0h.

If enabled, the corresponding zone is hidden.

Unused data

At address 1fh:5: Unused data of size 0h:6: 00

631 Alarm Settings v1.21done

Element at address 24c1400h of size 20h.

631.1 Analog Alarm Settings v1.21done

Element at address 0h of size ah.

Action

At address 0h: Enumeration of size 1h, with 4 options.

Value	Name	Description
0	None
1	TX and background
2	TX and non-local alarm
3	TX and local alarm

Mode

At address 1h: Enumeration of size 1h, with 3 options.

Value	Name	Description
0	None
1	DTMF
2	5-Tone

DTMF/5Tomn id index

At address 2h: 8-bit unsigned integer value (uint8). Default value 0h.

0-based index of DTMF or 5-tone id.

Alarm duration

At address 3h: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the alarm duration in seconds.

Alarm TX duration

At address 4h: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the alarm transmit duration in seconds.

Alarm RX duration

At address 5h: 8-bit unsigned integer value (uint8).

Specifies the alarm RX duration in seconds.

Alarm channel index

At address 6h: 16-bit unsigned little-endian integer value (uint16le). Default value 0h.

Must be a 0-based index to an analog channel.

Alarm channel selection

At address 8h: Enumeration of size 1h, with 2 options.

Value	Name	Description
0	Current Channel
1	Set Channel

Emergency cycle

At address 9h: 8-bit unsigned integer value (uint8). Default value 0h.

0 = continuous, otherwise count 1...255.

631.2 DMR Alarm Settings v1.21done

Element at address ah of size 8h.

Action

At address 0h: Enumeration of size 1h, with 4 options.

Value	Name	Description
0	None
1	TX and background
2	TX and non-local alarm
3	TX and local alarm

Alarm duration

At address 1h: 8-bit unsigned integer value (uint8). Default value 14h.

Specifies the alarm duration in seconds.

Alarm TX duration

At address 2h: 8-bit unsigned integer value (uint8). Default value 1fh.

Specifies the TX duration in seconds.

Alarm RX duration

At address 3h: 8-bit unsigned integer value (uint8). Default value 1fh.

Specifies the alarm RX duration in seconds.

Alarm channel index

At address 4h: 16-bit unsigned little-endian integer value (uint16le). Default value 0h.

Specifies the index the alarm channel. Must be an index of a DMR channel.

Alarm channel selection

At address 6h: Enumeration of size 1h, with 2 options.

Value	Name	Description
0	Channe index
1	Current channel

Emergency cycle

At address 7h: 8-bit unsigned integer value (uint8).

0=Continous, else number of cycles.

631.3 Lone Worker Settings v1.21done

Element at address 12h of size 4h.

Voice switch broadcast

At address 0h: 8-bit unsigned integer value (uint8). Default value 0h.

Some bull shit. Likely a period in minutes+1. Of regular transmissions. That is 0=1m, 1=2m,...

Area switch broadcast

At address 1h: 8-bit unsigned integer value (uint8). Default value 0h.

Uh, the engineerd absolutely gave a shit. This is some other time interval. This time in seconds+1. That is, 0=1s, 1=2s, ...

Mic switch broadcast

At address 2h: Enumeration of size 1h, with 2 options.

Value	Name	Description
0	Key
1	Voice transmission

Receive alarm

At address 3h: Enumeration of size 1h, with 2 options.

Value	Name	Description
0	Off
1	On

Unused data

At address 16h: Unused data of size ah: 00

632 DMR Alarm Extension v1.21done

Element at address 24c1440h of size 30h.

Call Type

At address 0h: Enumeration of size 1h, with 3 options.

Value	Name	Description
0	Private Call
1	Group Call
2	All Call

Unused data

At address 1h: Unused data of size 22h:

Destination Id

At address 23h: 32-bit bcd big-endian integer value (bcd8be).

Unused data

At address 27h: Unused data of size 9h: 00

633 Channel Bitmap Element v1.21done

Element at address 24c1500h of size 200h.

633.1 Channel enable bits v1.21done

Exactly 4000 repetitions of Channel enable bit.

Channel enable bit

boolean value.

Unused data

At address 1f4h: Unused data of size ch:

634 DMR Encryption IDs v1.21done

Exactly 32 repetitions of DMR Encryption Id.

DMR Encryption Id

16-bit unsigned big-endian integer value (uint16be). Default value 0h.

ffffh=Invalid.

635 DMR Encryption Keys v1.21done

Exactly 32 repetitions of DMR Encryption Key.

636 DMR Encryption Key v1.21done

Element of size 28h.

Unused data

At address 0h: Unused data of size 10h: 00

Key

At address 10h: 16-bit signed big-endian integer value (int16be). Default value ffffh.

Unused data

At address 12h: Unused data of size 16h: 00

637 Auto repeater offset frequency bank v1.21done

Element at address 24c2000h of size 3f0h.

Holds up to 250 offset frequencies for the auto-repeater feature.

637.1 Auto repeater offset frequencies v1.21done

Exactly 250 repetitions of Offset frequency.

The actual list of exactly 250 offset frequencies.

Offset frequency

32-bit signed little-endian integer value (int32le). Default value 0h.

Encodes the absolute value of the offset frequency.

The frequency is encoded as multiples of 10Hz. If 0=disabled.

Unused data

At address 3e8h: Unused data of size 8h: 00

638 2-Tone functions v1.21done

Up to 16 repetitions of Two-Tone function.

Encodes up to 16 two-tone functions.

639 Two-Tone function v1.21done

Element of size 20h.

First tone frequency

At address 0h: 16-bit unsigned little-endian integer value (uint16le). Default value 0h.

Encodes the frequency of the first tone.

The value is stored in multiples of 0.1Hz.

Second tone frequency

At address 2h: 16-bit unsigned little-endian integer value (uint16le). Default value 0h.

Encodes the frequency of the second tone.

The value is stored in multiples of 0.1Hz.

Response

At address 4h: Enumeration of size 1h, with 3 options.

Value	Name	Description
0	None
1	Tone
2	Respond

Function name

At address 5h: ASCII string of length (up to) 7 chars, 00h-padded.

Unused data

At address ch: Unused data of size 14h: 00

640 2-Tone function bitmap v1.21done

Element at address 24c2600h of size 10h.

640.1 2-Tone function bits v1.21done

Exactly 16 repetitions of 2-Tone function bit.

2-Tone function bit

boolean value. Default value 0h.

Unused data

At address 2h: Unused data of size eh: 00

641 AES encryption key bank v1.21done

Element at address 24c4000h of size 4000h.

641.1 AES encryption keys v1.21done

Exactly 255 repetitions of AES encryption key.

641.2 AES encryption key v1.21done

Element of size 40h.

Key Id

At address 0h: 8-bit unsigned integer value (uint8). Default value 0h.

1-based key Id. 0=Off.

Key Data

At address 1h: 256-bit unsigned big-endian integer value (uint256be). Default value 0h.

Up to 256 bit AES key. The key is right aligned. You may consider it as a big-endian integer.

Unused data

At address 21h: Unused data of size 1h: 00

Key size

At address 22h: 8-bit unsigned integer value (uint8). Valid values between 20h and 40h, with default value 40h.

Specifies the key size in multiples of 4bit.

Unused data

At address 23h: Unused data of size 1dh: 00

Unused data

At address 3fc0h: Unused data of size 40h: 00

642 AES encryption key bitmap v1.21done

Element at address 24c8000h of size 20h.

642.1 AES key enable bits v1.21done

Exactly 255 repetitions of Key enable bit.

Key enable bit

boolean value. Default value 0h.

Unused data

At address 1fh:0: Unused data of size 0h:1: 00

643 General Settings v1.21done

Element at address 2500000h of size f0h.

Key Tone

At address 0h: Enumeration of size 1h, with 11 options.

Value	Name	Description
0	Off
1	Level 1
2	Level 2
3	Level 3
4	Level 4
5	Level 5
6	Level 6
7	Level 7
8	Level 8
9	With RX Tone A
10	With RX Tone B

Display Mode

At address 1h: Enumeration of size 1h, with 2 options. Speficies the channel display mode. That is name or frequency.

Value	Name	Description
0	Channel
1	Frequency

Enable automatic key lock

At address 2h: 8-bit unsigned integer value (uint8).

Auto-shutoff delay

At address 3h: Enumeration of size 1h, with 5 options. Specifies the time period afer wich the radio shuts off.

Value	Name	Description
0	Off
1	10 min
2	30 min
3	60 min
4	120 min

Transmit Timeout TOT

At address 4h: 8-bit unsigned integer value (uint8).

Specifies the transmit time out in multiples of 30s.

Valid values are Off (0), 30s, ..., 240s.

Language

At address 5h: Enumeration of size 1h, with 2 options.

Value	Name	Description
0	English
1	German

Boot Display

At address 6h: Enumeration of size 1h, with 3 options.

Value	Name	Description
0	Default
1	Custom Text
2	Custom Image

Enable Boot Password

At address 7h: 8-bit unsigned integer value (uint8).

Frequency step size

At address 8h: Enumeration of size 1h, with 10 options. Specifies the frequency step size.

Value	Name	Description
0	2.5 kHz
1	5 kHz
2	6.25 kHz
3	8.33 kHz
4	10 kHz
5	12.5 kHz
6	20 kHz
7	25 kHz
8	30 kHz
9	50 kHz

Squelch Level VFO A

At address 9h: 8-bit unsigned integer value (uint8). Default value 1h.

Specifies the squelch level for VFO A.

Valid values are Off, 1, ..., 5, where 0=Off.

Squelch Level VFO B

At address ah: 8-bit unsigned integer value (uint8). Default value 1h.

Valid values are Off, 1, ..., 5, where 0=Off.

VFO Scan Type

At address bh: Enumeration of size 1h, with 3 options. Specifies if and when a scan continues.

Value	Name	Description
0	Fixed Time	Continues after a fixed time period.
1	Carrier	Continues once the carrier is gone.
2	Stop	Stops the scan after the first signal is recieved.

DMR mic gain

At address ch: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the DMR microphone gain.

Valid values are [1, ..., 5], encoded as n + 1. That is, 0=1, ..., 4=5.

Work Mode A

At address dh: Enumeration of size 1h, with 2 options.

Value	Name	Description
0	Channel
1	VFO

Work Mode B

At address eh: Enumeration of size 1h, with 2 options.

Value	Name	Description
0	Channel
1	VFO

STE type

At address fh: Enumeration of size 1h, with 5 options. Specifies the squelch tail elemination type.

Value	Name	Description
0	Off
1	Silent
2	120 deg
3	180 deg
4	240 deg

STE Frequency

At address 10h: Enumeration of size 1h, with 3 options. Squelch tail elemination frequency.

Value	Name	Description
0	Off
1	55.2 Hz
2	259.2 Hz

Group call hang time

At address 11h: 8-bit unsigned integer value (uint8).

Specifies hang time in seconds. That is. 0=1s, ..., 29=30s, 30=30min, 31=infinite.

Private call hang time

At address 12h: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies hang time in seconds. That is. 0=1s, ..., 29=30s, 30=30min, 31=infinite.

Unknown data

At address 13h: Unknown data of size 1h.

Preamble duration

At address 14h: 8-bit unsigned integer value (uint8). Default value 5h.

Specifies the preamble duration in multiples of 60ms.

That is 0 = 0ms, ..., 40 = 2400ms.

FM broadcast channel index

At address 15h: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the pre-set FM broadcast channel.

FM broadcast mode

At address 16h: Enumeration of size 1h, with 2 options.

Value	Name	Description
0	Channel
1	VFO

Boot Zone A

At address 17h: 8-bit unsigned integer value (uint8).

When work mode for VFO A is set to Channel, this index specifies the zone. 0-based zone index.

Boot Zone B

At address 18h: 8-bit unsigned integer value (uint8).

When work mode for VFO B is set to Channel, this index specifies the zone. 0-based zone index.

Enable FM broadcast monitor

At address 19h: 8-bit unsigned integer value (uint8). Default value 0h.

If set to 1, radio calls are received while listening to the FM broadcast.

Enable Recording

At address 1ah: 8-bit unsigned integer value (uint8).

Unknown data

At address 1bh: Unknown data of size 2h.

Display Brightness

At address 1dh: 8-bit unsigned integer value (uint8). Default value 0h.

Possible values [0-4].

Unknown data

At address 1eh: Unknown data of size 1h.

Enable GPS

At address 1fh: 8-bit unsigned integer value (uint8). Default value 0h.

Enable SMS Alert

At address 20h: 8-bit unsigned integer value (uint8).

Unknown data

At address 21h: Unknown data of size 1h.

Enable FM broadcast monitor

At address 22h: 8-bit unsigned integer value (uint8). Default value 0h.

If set to 1, radio calls are received while listening to the FM broadcast.

Main VFO

At address 23h: Enumeration of size 1h, with 2 options. Specifies, which VFO is the main one.

Value	Name	Description
0	A
1	B

Enable Subchannel

At address 24h: 8-bit unsigned integer value (uint8). Default value 0h.

TBST

At address 25h: Enumeration of size 1h, with 4 options.

Value	Name	Description
0	1000 Hz
1	1450 Hz
2	1750 Hz
3	2100 Hz

Enable Call Alert

At address 26h: 8-bit unsigned integer value (uint8).

Time Zone

At address 27h: Enumeration of size 1h, with 31 options. How about encoding it as a singed integer in multiples of 5min? Also, UTC+13h were you drunk?

Value	Name	Description
0	UTC-12:00h
1	UTC-11:00h
2	UTC-10:00h
3	UTC-09:00h
4	UTC-08:00h
5	UTC-07:00h
6	UTC-06:00h
7	UTC-05:00h
8	UTC-04:00h
9	UTC-03:30h
10	UTC-02:00h
11	UTC-01:00h
12	UTC
13	UTC+01:00h
14	UTC+02:00h
15	UTC+03:00h
16	UTC+03:30h
17	UTC+04:00h
18	UTC+04:30h
19	UTC+05:00h
20	UTC+05:30h
21	UTC+05:45h
22	UTC+06:00h
23	UTC+07:00h
24	UTC+08:00h
25	UTC+08:30h
26	UTC+09:00h
27	UTC+10:00h
28	UTC+11:00h
29	UTC+12:00h
30	UTC+13:00h

Talk permit tone

At address 28h: Enumeration of size 1h, with 4 options.

Value	Name	Description
0	None
1	DMR
2	FM
3	Both

Enable DMR call reset tone

At address 29h: 8-bit unsigned integer value (uint8).

DMR channel free tone

At address 2ah: Enumeration of size 1h, with 4 options. Selects the channel free/idle tone.

Value	Name	Description
0	Off
1	Type 1
2	Type 2
3	Type 3

Menu exit time

At address 2bh: 8-bit unsigned integer value (uint8). Default value 5h.

Specifies the menu hang time/duartion.

The duration is specified in multiples of 5s + 5s. That is, 0=5s, 1=10s, 2=15s, ..., 11=60s.

Enable filter own Id

At address 2ch: 8-bit unsigned integer value (uint8). Default value 0h.

Filters own ID from list of missed calls.

Enable Startup Tone

At address 2dh: 8-bit unsigned integer value (uint8). Default value 0h.

Enable call-end notification.

At address 2eh: 8-bit unsigned integer value (uint8). Valid values from 0h, with default value 0h.

If enabled, a small box is shown at the end of the call.

Let us all celebrate this very improtant option.

Max speaker volume

At address 2fh: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the maximum speaker volume.

Valid values are [Indoors, 1, ..., 8]. Where Indoors is encoded as 0.

kill

At address 30h: 8-bit unsigned integer value (uint8). Default value 0h.

Enable remote monitor

At address 31h: 8-bit unsigned integer value (uint8). Default value 0h.

Enable RX DMR APRS Positions

At address 32h: 8-bit unsigned integer value (uint8).

Long press duration

At address 33h: 8-bit unsigned integer value (uint8). Valid values from 0h, with default value 0h.

Specifies the duration in n-1 seconds.

That is, 0=1s, 1=2s, ..., 4=5s.

Show volume bar

At address 34h: 8-bit unsigned integer value (uint8). Default value 0h.

Shows the volume bar, when the volume is changed.

Auto-repeater A direction

At address 35h: Enumeration of size 1h, with 3 options.

Value	Name	Description
0	Off
1	Positive
2	Negative

DMR monitor mode

At address 36h: Enumeration of size 1h, with 3 options.

Value	Name	Description
0	Off
1	Single slot
2	Double slot

DMR monitor match CC

At address 37h: Enumeration of size 1h, with 2 options.

Value	Name	Description
0	Any
1	Same

DMR monitor match id

At address 38h: Enumeration of size 1h, with 2 options.

Value	Name	Description
0	Any
1	Same

Enable DMR monitor slot hold

At address 39h: 8-bit unsigned integer value (uint8). Default value 0h.

Last caller display mode

At address 3ah: Enumeration of size 1h, with 4 options. Specifies if and how the last caller is shown.

Value	Name	Description
0	Off
1	DMR ID
2	Callsign
3	Both

Unused data

At address 3bh: Unknown data of size 1h.

FM Call hold time

At address 3ch: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the hold time in seconds. Valid values are 0s, ..., 30s.

Show Clock

At address 3dh: 8-bit unsigned integer value (uint8).

Sent (DMR) APRS message.

At address 3eh: 8-bit unsigned integer value (uint8). Default value 0h.

Enable enhanced audio

At address 3fh: 8-bit unsigned integer value (uint8). Default value 0h.

VFO Scan UHF min Frequency

At address 40h: 32-bit unsigned little-endian integer value (uint32le).

in 10Hz.

VFO Scan UHF max Frequency

At address 44h: 32-bit unsigned little-endian integer value (uint32le).

in 10Hz

VFO Scan VHF min Frequency

At address 48h: 32-bit unsigned little-endian integer value (uint32le).

in 10Hz

VFO Scan VHF max Frequency

At address 4ch: 32-bit unsigned little-endian integer value (uint32le).

in 10Hz.

VHF auto-repeater min frequency

At address 50h: 32-bit unsigned little-endian integer value (uint32le). Default value 0h.

Specifies the lower bound of the first VHF auto-repeater frequency range.

The freuqency is stored in multiples of 10Hz.

VHF auto-repeater max frequency

At address 54h: 32-bit unsigned little-endian integer value (uint32le).

Speifies the upper bound of the first VHF auto-repeater frequency range.

The frequency is stored in multiples of 10Hz.

UHF auto-repeater min frequency

At address 58h: 32-bit unsigned little-endian integer value (uint32le). Default value 0h.

Specifies the lower bound of the first UHF auto-repeater frequency range.

The freuqency is stored in multiples of 10Hz.

UHF auto-repeater max frequency

At address 5ch: 32-bit unsigned little-endian integer value (uint32le).

Speifies the upper bound of the first UHF auto-repeater frequency range.

The frequency is stored in multiples of 10Hz.

643.1 Call Permit Melody v1.21done

Element at address 60h of size 14h.

643.1.1 Tones v1.21done

Exactly 5 repetitions of Frequency.

Frequency

16-bit unsigned little-endian integer value (uint16le).

in Hz.

643.1.2 Durations v1.21done

Exactly 5 repetitions of Duration.

Duration

16-bit unsigned little-endian integer value (uint16le).

in ms.

643.2 Idle Melody v1.21done

Element at address 74h of size 14h.

643.2.1 Tones v1.21done

Exactly 5 repetitions of Frequency.

Frequency

16-bit unsigned little-endian integer value (uint16le).

in Hz.

643.2.2 Durations v1.21done

Exactly 5 repetitions of Duration.

Duration

16-bit unsigned little-endian integer value (uint16le).

in ms.

643.3 Reset Melody v1.21done

Element at address 88h of size 14h.

643.3.1 Tones v1.21done

Exactly 5 repetitions of Frequency.

Frequency

16-bit unsigned little-endian integer value (uint16le).

in Hz.

643.3.2 Durations v1.21done

Exactly 5 repetitions of Duration.

Duration

16-bit unsigned little-endian integer value (uint16le).

in ms.

UHF Auto-repeater offset frequency 1 index

At address 9ch: 8-bit unsigned integer value (uint8). Default value 0h.

The 0-based index of the offset frequency.

If set to ffh, disabled.

VHF Auto-repeater offset frequency index.

At address 9dh: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the 0-based index of the offset frequency.

If set to ffh, disables the auto-repeater feature.

Unknown data

At address 9eh: Unknown data of size 1h.

Priority zone index A

At address 9fh: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the zone 0-based index for the priority zone of VFO A. If none is set, set to ffh.

Priority zone index B

At address a0h: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the zone 0-based index for the priority zone of VFO B. If none is set, set to ffh.

Unknown data

At address a1h: Unknown data of size 1h.

Call display mode

At address a2h: Enumeration of size 1h, with 3 options.

Value	Name	Description
0	Off
1	Call
2	Name

Unknown data

At address a3h: Unknown data of size 1h.

Enable bluetooth

At address a4h: 8-bit unsigned integer value (uint8). Default value 0h.

If set to 1, blue tooth is enabled.

Bluetooth and internal mic

At address a5h: 8-bit unsigned integer value (uint8). Default value 0h.

If set to 1, the bluetooth and internal mic are used.

Bluetooth and internal speaker.

At address a6h: 8-bit unsigned integer value (uint8). Default value 0h.

If set to 1, blue tooth and the internal speaker are used.

Enable plug-in recording tone

At address a7h: 8-bit unsigned integer value (uint8). Default value 0h.

Whatever that is. Here you can enable it.

Ranging interval

At address a8h: 8-bit unsigned integer value (uint8). Default value 5h.

Specifies the ranging interval in seconds. Valid values are [5,255].

No offset. Nobody gave a f**k. I wonder, what happens if one sets it to 0.

Bluetooth mic gain

At address a9h: 8-bit unsigned integer value (uint8).

Specifies the microphone gain for the blue tooth source.

Valid values are 1-5, encoded as 0-4. That is, 0=1, ..., 4=5.

Bluetooth speaker gain

At address aah: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the speaker gain for the blue tooth output.

Valid values are 1-5, encoded as 0-4. That is, 0=1, ..., 4=5.

Channel number mode

At address abh: Enumeration of size 1h, with 2 options. WTF, really? Specifies whether the total or within-zone number is show as the channel number. It makes absolutely no sense to show a total channel number, dear AnyTone engineer. The user can only access channels through a zone. So, if a channel is not assigned to any zone, it is basically hidden. So, explain to me, why should anyone care about the absolute channel number?

Value	Name	Description
0	Total
1	Within Zone

Enable show current contact

At address ach: 8-bit unsigned integer value (uint8). Default value 0h.

Enables the display of the current contact.

Why is the default off? Isn't it a pretty important information?

Auto-roaming period

At address adh: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the auto-roaming period (if enabled) in multiples of 1 minute.

The period is stored as n + 1min. That is 0=1min, 1=2min, ..., 255=256min.

Call sign color

At address aeh: Enumeration of size 1h, with 7 options. Specifies the color, the callsign is shown in. Because it is incredible important to be able to set it. Default is orange (0).

Value	Name	Description
0	Orange
1	Red
2	Yellow
3	Green
4	Turquoise
5	Blue
6	White

Units

At address afh: Enumeration of size 1h, with 2 options. .

Value	Name	Description
0	Metric
1	Archaic

Unknown data

At address b0h: Unknown data of size 0h:3.

Forced lock FoLk

At address b0h:4: boolean value. Default value 0h.

Side key lock SkLk

At address b0h:3: boolean value.

If set, the side keys are locked too.

Unknown data

At address b0h:2: Unknown data of size 0h:1.

Enable keyboard lock KbLk

At address b0h:1: boolean value. Default value 0h.

If enabled, the keyboard is locked.

Enable knob lock KnLk

At address b0h:0: boolean value. Default value 0h.

If set, the knob is also locked.

Roaming delay

At address b1h: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the delay in seconds between a auto-roaming trigger and the actual auto-roaming.

Valid values are [None, 1s, 30s], where None is encoded as 0.

Standby text color

At address b2h: Enumeration of size 1h, with 8 options. Another palette. Thanks! Seriously dear AnyTone engineer. Why for f**k sake can't you produce a consistent encoding of colors? It is called copy-and-paste. The produces a lot of code you can impress your supervisor with at zero cost. Give it a try, you gonna love it.

Value	Name	Description
0	White
1	Black
2	Orange
3	Red
4	Yellow
5	Green
6	Turquoise
7	Blue

Standby background image

At address b3h: Enumeration of size 1h, with 3 options. Specifies a wallpaper for the radio. Yes, very important feature.

Value	Name	Description
0	Default
1	Custom 1
2	Custom 2

Show last caller on boot

At address b4h: 8-bit unsigned integer value (uint8). Default value 0h.

If set to 1, shows the last caller after boot.

Why do I need to know that? That might be ages ago.

SMS standard

At address b5h: Enumeration of size 1h, with 3 options. Specifies the SMS standard to use.

Value	Name	Description
0	Motorola
1	Hytera
2	ETSI DMR

Auto-repeater B direction

At address b6h: Enumeration of size 1h, with 3 options.

Value	Name	Description
0	Off
1	Positive
2	Negative

Send selected analog contact

At address b7h: 8-bit unsigned integer value (uint8). Valid values from 0h, with default value 0h.

Additionally to own ID, send selected FM destination ID from address book.

Enable default boot channel

At address b8h: 8-bit unsigned integer value (uint8).

If set to 1, a default channel for VFO A and B is set.

Boot zone VFO A

At address b9h: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the zone index for the boot zone.

That is, the zone selected for VFO A at boot.

Boot zoot VFO B

At address bah: 8-bit unsigned integer value (uint8).

Default boot zone for VFO B

Encodes the 0-based boot zone for the VFO B. That is, the zone being selected at bootup.

Default boot channel VFO A

At address bbh: 8-bit unsigned integer value (uint8). Default value ffh.

Specifies the channel index within the boot zone.

If set to ffh, the VFO is selected.

Default boot channel VFO B

At address bch: 8-bit unsigned integer value (uint8). Default value ffh.

Encodes the channel index for the boot channel for VFO B.

That is, the 0-based index of the channel within the boot zone B. If ffh is selected, the VFO is selected as the boot channel.

Roaming zone index

At address bdh: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the 0-based roaming zone index.

Enable repeater check

At address beh: 8-bit unsigned integer value (uint8). Default value 0h.

Repeater check interval

At address bfh: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the repeater check interval in multuples of 5s. The period is 5s * n + 5s with valid values in 5s - 50s.

Repeater check retry count

At address c0h: 8-bit unsigned integer value (uint8). Default value 0h.

Number is specified as 3 + n with valid values in [3, 5].

Auto-roaming start condition

At address c1h: Enumeration of size 1h, with 2 options. Specifies, when auto roaming is triggered.

Value	Name	Description
0	Periodic	Auto roaming starts periodically.
1	Out-of-range	Auto roaming starts on out-of-range event.

Unknown data

At address c2h: Unknown data of size 1h.

Show menu separator

At address c3h: 8-bit unsigned integer value (uint8). Default value 0h.

If set to 1, shows menu separators.

Keep last caller

At address c4h: 8-bit unsigned integer value (uint8). Default value 0h.

If set to 1, the last caller is kept when the channel is changed.

Channel A name color

At address c5h: Enumeration of size 1h, with 7 options. Specifies the color of the channel name. Because it is incredible important to be able to set it. Default is orange (0).

Value	Name	Description
0	Orange
1	Red
2	Yellow
3	Green
4	Turquoise
5	Blue
6	White

Repeater check OOR notification

At address c6h: Enumeration of size 1h, with 3 options. Specifies the mode of notification for an out-of-range event.

Value	Name	Description
0	Off
1	Tone
2	Voice

Backlight duration TX

At address c7h: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the duration of the backlight during TX.

Encodes the duration in seconds. Valid values are [1,30]. If set to 0, the backlight is disabled during TX.

Enable auto roaming

At address c8h: 8-bit unsigned integer value (uint8). Default value 0h.

If set to 1, enables auto roaming.

643.4 Short-press key functions v1.21done

Exactly 10 repetitions of Function.

Functions for programmable keys 1, ..., 6, A, ..., D.

Function

Enumeration of size 1h, with 60 options.

Value	Name	Description
0	Off
1	Voltage
2	Power
3	Talk Around
4	Reverse
5	DMR Encryption
6	Call
7	VFO/Channel
8	Scan
9	FM Broadcast
10	Alarm
11	Record Switch
12	Record
13	SMS
14	Dial
15	GPS Information
16	Monitor
17	Main Channel Toggle
18	Hot Key 1
19	Hot Key 2
20	Hot Key 3
21	Hot Key 4
22	Hot Key 5
23	Hot Key 6
24	Work Alone
25	Nuisance Delete
26	DMR Monitor
27	Sub Channel Toggle
28	Priority Zone
29	VFO Scan
30	Mic Sound Quality
31	Last Call Reply
32	Toggle Channel Type
33	Ranging
34	Roaming
35	Channel Ranging
36	Set Max Volume
37	Timeslot Toggle
38	APRS Type Toggle
39	Select Zone
40	A Mute
41	B Mute
42	Roaming Settings
43	APRS Settings
44	Zone increment
45	Zone decrement
46	Exit
47	Menu
48	Cross Band Repeater
49	Speaker Mode
50	Channel Name
51	Bluetooth
52	GPS
53	CTCSS/DTS Scan
54	TBST
55	APRS Send
56	FM APRS Info
57	GPS Roaming
58	Noise Reduction RX
59	Noise Reduction TX

643.5 Long-press key functions v1.21done

Exactly 10 repetitions of Function.

Functions for programmable keys 1, ..., 6, A, ..., D.

Function

Enumeration of size 1h, with 60 options.

Value	Name	Description
0	Off
1	Voltage
2	Power
3	Talk Around
4	Reverse
5	DMR Encryption
6	Call
7	VFO/Channel
8	Scan
9	FM Broadcast
10	Alarm
11	Record Switch
12	Record
13	SMS
14	Dial
15	GPS Information
16	Monitor
17	Main Channel Toggle
18	Hot Key 1
19	Hot Key 2
20	Hot Key 3
21	Hot Key 4
22	Hot Key 5
23	Hot Key 6
24	Work Alone
25	Nuisance Delete
26	DMR Monitor
27	Sub Channel Toggle
28	Priority Zone
29	VFO Scan
30	Mic Sound Quality
31	Last Call Reply
32	Toggle Channel Type
33	Ranging
34	Roaming
35	Channel Ranging
36	Set Max Volume
37	Timeslot Toggle
38	APRS Type Toggle
39	Select Zone
40	A Mute
41	B Mute
42	Roaming Settings
43	APRS Settings
44	Zone increment
45	Zone decrement
46	Exit
47	Menu
48	Cross Band Repeater
49	Speaker Mode
50	Channel Name
51	Bluetooth
52	GPS
53	CTCSS/DTS Scan
54	TBST
55	APRS Send
56	FM APRS Info
57	GPS Roaming
58	Noise Reduction RX
59	Noise Reduction TX

Unknown data

At address ddh: Unknown data of size 1h.

Repeater check OOR notification count

At address deh: 8-bit unsigned integer value (uint8).

Number of notifications for a out-of-range event. The number is specified as n + 1 with an valid value in [1, 10].

Unknown data

At address dfh: Unknown data of size 3h.

Bluetooth hold duration

At address e2h: Enumeration of size 1h, with 33 options.

Value	Name	Description
0	Off
1	1s
2	2s
3	3s
4	4s
5	5s
6	6s
7	7s
8	8s
9	9s
10	11s
11	12s
12	13s
13	14s
14	15s
15	16s
16	17s
17	18s
18	19s
19	20s
20	21s
21	22s
22	23s
23	24s
24	25s
25	26s
26	27s
27	28s
28	29s
29	30s
30	60s
31	120s
32	Infinite

Bluetooth RX delay

At address e3h: 8-bit unsigned integer value (uint8). Default value 0h.

Delay in multiples of 500ms.

That is 500ms + 500ms * n: 0=500ms, 1=1s, ..., 10=5.5s.

Unknown data

At address e4h: Unknown data of size ch.

644 B channels v1.21done

Element at address 2500100h of size 400h.

B channel.

644.1 A channel List v1.21done

Element at address 0h of size 200h.

644.1.1 Channel indices v1.21done

Exactly 250 repetitions of Channel index.

Channel A indices for all possible zones.

Channel index

16-bit unsigned little-endian integer value (uint16le). Default value 0h.

Specifies a 0-based channel index. No special values.

Unused data

At address 1f4h: Unused data of size ch: 00

644.2 B channel List v1.21done

Element at address 200h of size 200h.

644.2.1 Channel indices v1.21done

Exactly 250 repetitions of Channel index.

Channel B indices for all possible zones.

Channel index

16-bit unsigned little-endian integer value (uint16le). Default value 0h.

Specifies a 0-based channel index. No special values.

Unused data

At address 1f4h: Unused data of size ch: 00

645 DTMF Ids v1.21done

Exactly 16 repetitions of DTMF Id.

Encodes DTMF PTT ids.

646 DTMF Id v1.21done

Exactly 16 repetitions of DTMF digit.

DTMF digit

8-bit unsigned integer value (uint8). Default value ffh.

Valid values 0h - fh. If not set, ffh.

647 Boot Settings v1.21done

Element at address 2500600h of size 30h.

Boot text line 1

At address 0h: ASCII string of length (up to) 14 chars, 00h-padded. Specifies the first line of the boot text.

Pad bytes

At address eh: Unused data of size 2h: 00 00

Boot text line 2

At address 10h: ASCII string of length (up to) 14 chars, 00h-padded. Encodes the second line of the boot text.

Pad bytes

At address 1eh: Unused data of size 2h: 00 00

Boot password

At address 20h: ASCII string of length (up to) 8 chars, 00h-padded. Plain boot password.

Although this is an ASCII string, only digits are allowed. That is 30h-39h.

Unused data

At address 28h: Unused data of size 8h: 00

648 APRS settings v1.21done

Element at address 2501000h of size 100h.

Unknown data

At address 0h: Unknown data of size 5h.

FM APRS TX delay

At address 5h: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the transmit FM APRS delay in multiple of 20ms. Valid values are 0-5100ms.

FM APRS sub tone type

At address 6h: Enumeration of size 1h, with 3 options. Specifies the transmit sub-tone for FM APRS.

Value	Name	Description
0	None
1	CTCSS
2	DCS

FM APRS TX CTCSS tone

At address 7h: Enumeration of size 1h, with 51 options.

Value	Name	Description
0	62.5 Hz
1	67.0 Hz
2	69.3 Hz
3	71.9 Hz
4	74.4 Hz
5	77.0 Hz
6	79.7 Hz
7	82.5 Hz
8	85.4 Hz
9	88.5 Hz
10	91.5 Hz
11	94.8 Hz
12	97.4 Hz
13	100.0 Hz
14	103.5 Hz
15	107.2 Hz
16	110.9 Hz
17	114.8 Hz
18	118.8 Hz
19	123.0 Hz
20	127.3 Hz
21	131.8 Hz
22	136.5 Hz
23	141.3 Hz
24	146.2 Hz
25	151.4 Hz
26	156.7 Hz
27	159.8 Hz
28	162.2 Hz
29	165.5 Hz
30	167.9 Hz
31	171.3 Hz
32	173.8 Hz
33	177.3 Hz
34	179.9 Hz
35	183.5 Hz
36	186.2 Hz
37	189.9 Hz
38	192.8 Hz
39	196.6 Hz
40	199.5 Hz
41	203.5 Hz
42	206.5 Hz
43	210.7 Hz
44	218.1 Hz
45	225.7 Hz
46	229.1 Hz
47	233.6 Hz
48	241.8 Hz
49	250.3 Hz
50	254.1 Hz

FM APRS DCS code

At address 8h: 16-bit unsigned little-endian integer value (uint16le).

Encodes the DCS code in a complex way.

That is, the least significant 9 bits encode the binary DCS code and 9th bit encodes the inverted flag of DCS.

Manual TX interval

At address ah: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the manual TX interval in second. 0: Off, 1-255.

Automatic TX interval

At address bh: 8-bit unsigned integer value (uint8).

Specifies the interval in multiples of 30s. 0:Off. Valid values 30-7650s.

APRS monitor enable

At address ch: Enumeration of size 1h, with 2 options. Listen to the APRS packet transmission.

Value	Name	Description
0	Off
1	On

Enable fixed location

At address dh: 8-bit unsigned integer value (uint8). Valid values from 0h, with default value 0h.

648.1 Fixed location v1.21done

Element at address eh of size 8h.

Latitude degree

At address 0h: 8-bit unsigned integer value (uint8).

Encodes the first position latitude degree value.

Latitude minute

At address 1h: 8-bit unsigned integer value (uint8).

Latitude seconds

At address 2h: 8-bit unsigned integer value (uint8).

Latitude hemisphere

At address 3h: Enumeration of size 1h, with 2 options.

Value	Name	Description
0	North
1	South

Longitude degree

At address 4h: 8-bit unsigned integer value (uint8).

Longitude minute

At address 5h: 8-bit unsigned integer value (uint8).

Longitude seconds

At address 6h: 8-bit unsigned integer value (uint8).

Longitude hemisphere

At address 7h: Enumeration of size 1h, with 2 options.

Value	Name	Description
0	East
1	West

Destination call

At address 16h: ASCII string of length (up to) 6 chars, 00h-padded.

Destination SSID

At address 1ch: 8-bit unsigned integer value (uint8). Default value 0h.

Source call

At address 1dh: ASCII string of length (up to) 6 chars, 00h-padded.

Source SSID

At address 23h: 8-bit unsigned integer value (uint8).

APRS path string 0-14h

At address 24h: ASCII string of length (up to) 21 chars, 00h-padded. First half of the APRS path string. Contains the first 24 bytes.

APRS symbol table

At address 39h: 8-bit signed integer value (int8).

A char!

APRS symbol

At address 3ah: 8-bit signed integer value (int8).

A char!

FM APRS transmit power

At address 3bh: Enumeration of size 1h, with 4 options.

Value	Name	Description
0	Low
1	Mid
2	High
3	Max

Prewave delay

At address 3ch: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the pre-wave delay in multiples of 10ms. Valid values are 0-2550ms.

Unknown data

At address 3dh: Unknown data of size 3h.

648.2 DMR APRS settings v1.21done

Element at address 40h of size 38h.

648.2.1 Channel indices v1.21done

Exactly 8 repetitions of Channel index.

Channel index

16-bit unsigned little-endian integer value (uint16le). Default value 0h.

0-based transmit channel. 0fa0=VFO A, 0fa1=VFO B, 0fa2=Current

648.2.2 Destination DMR IDs v1.21done

Exactly 8 repetitions of DMR destination ID.

DMR destination ID

32-bit bcd big-endian integer value (bcd8be). Default value 0h.

648.2.3 Call types v1.21done

Exactly 8 repetitions of Call type.

Call type

Enumeration of size 1h, with 3 options.

Value	Name	Description
0	Private Call
1	Group Call
2	All Call

Roaming support

At address 78h: Enumeration of size 1h, with 2 options.

Value	Name	Description
0	Disabled
1	Enabled

648.3 DMR APRS time slots v1.21done

Exactly 8 repetitions of Time slot.

Time slot

Enumeration of size 1h, with 3 options.

Value	Name	Description
0	Channel slot
1	Time slot 1
2	Time slot 2

Repeater activation delay

At address 81h: 8-bit unsigned integer value (uint8).

Delay in multiples of 100ms. 0=Off.

Valid values are Off, 100ms, ..., 1000ms.

APRS path 15h-38h

At address 82h: ASCII string of length (up to) 35 chars, 00h-padded. Second half of the APRS path.

APRS Info Display Duration

At address a5h: 8-bit unsigned integer value (uint8).

Specifies the duration in seconds.

In fact, it is (n+3) second. If n=13, infinite.

Fixed altitude

At address a6h: 16-bit unsigned little-endian integer value (uint16le).

Encodes the fixed altitude in feet.

Status report flag FStat

At address a8h:7: boolean value.

flag.

NEMA report flag FNEMA

At address a8h:6: boolean value.

flag.

Weather report flag FWX

At address a8h:5: boolean value.

Sets the weather report flag.

Message flag FMsg

At address a8h:4: boolean value.

flag.

Item flag FItem

At address a8h:3: boolean value.

flag.

Object flag FObj

At address a8h:2: boolean value.

flag.

Mic-E flag FMicE

At address a8h:1: boolean value.

flag.

Position Flag FPos

At address a8h:0: boolean value. Default value 0h.

flag.

Unused data

At address a9h:7: Unused data of size 0h:7: 00

Other flag FOther

At address a9h:0: boolean value. Default value 0h.

flag.

FM APRS bandwidth

At address aah: Enumeration of size 1h, with 2 options.

Value	Name	Description
0	Narrow
1	Wide

Enable AX.25 CRC check

At address abh: Enumeration of size 1h, with 2 options. If disabled, the all decoded AX.25 frames are processed, even those with invalid CRCs.

Value	Name	Description
0	On
1	Off

648.4 FM APRS frequencies v1.21done

Exactly 8 repetitions of FM APRS Frequency.

FM APRS Frequency

32-bit bcd big-endian integer value (bcd8be). Default value 0h.

Unknown data

At address cch: Unknown data of size 34h.

649 FM APRS Message v1.21done

Element at address 2501200h of size 40h.

Message Text

At address 0h: ASCII string of length (up to) 60 chars, 00h-padded.

Pad bytes

At address 3ch: Unused data of size 4h:

650 DMR APRS message v1.21done

Element at address 2501280h of size 30h.

DMR APRS message

At address 0h: ASCII string of length (up to) 32 chars, 00h-padded.

Unused data

At address 20h: Unused data of size 10h: 00

651 General Settings Extension v1.21done

Element at address 2501400h of size 200h.

Unknown data

At address 0h: Unknown data of size 1eh.

Talker alias priority

At address 1eh: Enumeration of size 1h, with 3 options.

Value	Name	Description
0	Off
1	Contact
2	Over the air

Talker alias encoding

At address 1fh: Enumeration of size 1h, with 3 options.

Value	Name	Description
0	ISO 7
1	ISO 8
2	Unicode

Enable Weather Alarm

At address 20h: 8-bit unsigned integer value (uint8). Default value 0h.

Enable Repeater

At address 21h: 8-bit unsigned integer value (uint8). Valid values from 0h, with default value 0h.

Enables the radio to act as a local repeater.

B can be on the same channel. The repeater receives on one time slot and transmits on the other.

Unknown data

At address 22h: Unknown data of size 1h.

Speakers

At address 23h: Enumeration of size 1h, with 3 options. Specifies the enabled speakers.

Value	Name	Description
0	Microphone
1	Radio
2	Both

Unknown data

At address 24h: Unknown data of size 1h.

Microphone Speaker Source

At address 25h: Enumeration of size 1h, with 2 options. Specifies the source for the speaker on the hand-microphone.

Value	Name	Description
0	Main Channel
1	Sub Channel

GPS Modes

At address 26h: Enumeration of size 1h, with 3 options.

Value	Name	Description
0	GPS
1	BDS
2	Both

Enable bluetooth PTT latch

At address 27h: 8-bit unsigned integer value (uint8). Default value 0h.

If set to 1, one press with lattch the PTT and a second press will unlatch the PTT again.

Bluetooth PTT sleep delay

At address 28h: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the delay befor the BT PTT button goes into sleep mode.

Encodes as minutes. Valid values are [Infinite, 1min, ..., 4min], where 0=Infinite.

Fan control

At address 29h: Enumeration of size 1h, with 3 options. Specifies what controls the fan.

Value	Name	Description
0	PTT
1	Temperature
2	Both

Weather channel index

At address 2ah: 8-bit unsigned integer value (uint8). Valid values from 0h, with default value 0h.

0-based index.

Manual dial group call hang time

At address 2bh: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies hang time in seconds. That is. 0=1s, ..., 29=30s, 30=30min, 31=infinite.

Manual dial private call hang time

At address 2ch: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies hang time in seconds. That is. 0=1s, ..., 29=30s, 30=30min, 31=infinite.

Channel Knob Short-Press Function

At address 2dh: Enumeration of size 1h, with 60 options.

Value	Name	Description
0	Off
1	Voltage
2	Power
3	Talk Around
4	Reverse
5	DMR Encryption
6	Call
7	VFO/Channel
8	Scan
9	FM Broadcast
10	Alarm
11	Record Switch
12	Record
13	SMS
14	Dial
15	GPS Information
16	Monitor
17	Main Channel Toggle
18	Hot Key 1
19	Hot Key 2
20	Hot Key 3
21	Hot Key 4
22	Hot Key 5
23	Hot Key 6
24	Work Alone
25	Nuisance Delete
26	DMR Monitor
27	Sub Channel Toggle
28	Priority Zone
29	VFO Scan
30	Mic Sound Quality
31	Last Call Reply
32	Toggle Channel Type
33	Ranging
34	Roaming
35	Channel Ranging
36	Set Max Volume
37	Timeslot Toggle
38	APRS Type Toggle
39	Select Zone
40	A Mute
41	B Mute
42	Roaming Settings
43	APRS Settings
44	Zone increment
45	Zone decrement
46	Exit
47	Menu
48	Cross Band Repeater
49	Speaker Mode
50	Channel Name
51	Bluetooth
52	GPS
53	CTCSS/DTS Scan
54	TBST
55	APRS Send
56	FM APRS Info
57	GPS Roaming
58	Noise Reduction RX
59	Noise Reduction TX

Channel Knob Long-Press Function

At address 2eh: Enumeration of size 1h, with 60 options.

Value	Name	Description
0	Off
1	Voltage
2	Power
3	Talk Around
4	Reverse
5	DMR Encryption
6	Call
7	VFO/Channel
8	Scan
9	FM Broadcast
10	Alarm
11	Record Switch
12	Record
13	SMS
14	Dial
15	GPS Information
16	Monitor
17	Main Channel Toggle
18	Hot Key 1
19	Hot Key 2
20	Hot Key 3
21	Hot Key 4
22	Hot Key 5
23	Hot Key 6
24	Work Alone
25	Nuisance Delete
26	DMR Monitor
27	Sub Channel Toggle
28	Priority Zone
29	VFO Scan
30	Mic Sound Quality
31	Last Call Reply
32	Toggle Channel Type
33	Ranging
34	Roaming
35	Channel Ranging
36	Set Max Volume
37	Timeslot Toggle
38	APRS Type Toggle
39	Select Zone
40	A Mute
41	B Mute
42	Roaming Settings
43	APRS Settings
44	Zone increment
45	Zone decrement
46	Exit
47	Menu
48	Cross Band Repeater
49	Speaker Mode
50	Channel Name
51	Bluetooth
52	GPS
53	CTCSS/DTS Scan
54	TBST
55	APRS Send
56	FM APRS Info
57	GPS Roaming
58	Noise Reduction RX
59	Noise Reduction TX

Channel B name color

At address 2fh: Enumeration of size 1h, with 7 options. Specifies the color of the channel name. Because it is incredible important to be able to set it. Default is orange (0).

Value	Name	Description
0	Orange
1	Red
2	Yellow
3	Green
4	Turquoise
5	Blue
6	White

Encryption Type

At address 30h: Enumeration of size 1h, with 2 options.

Value	Name	Description
0	Common/DMR
1	AES/ARC4

UI Mode

At address 31h: Enumeration of size 1h, with 2 options. Specifies the freedom in the UI. That is, in amateur mode, you can set a lot of stuff using the radio itself. In professional mode, you are basically locked in.

Value	Name	Description
0	Amateur
1	Professional

STE duration

At address 32h: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the STE duration in mutliples of 10ms. Valid values are [10ms-1000ms]

Microphone Type

At address 33h: Enumeration of size 1h, with 2 options. Specifies the microphon type used.

Value	Name	Description
0	AnyTone
1	Generic

Zone A name color

At address 34h: Enumeration of size 1h, with 7 options. Specifies the color of the zone name. Because it is incredible important to be able to set it. Default is orange (0).

Value	Name	Description
0	Orange
1	Red
2	Yellow
3	Green
4	Turquoise
5	Blue
6	White

Zone B name color

At address 35h: Enumeration of size 1h, with 7 options. Specifies the color of the zone name. Because it is incredible important to be able to set it. Default is orange (0).

Value	Name	Description
0	Orange
1	Red
2	Yellow
3	Green
4	Turquoise
5	Blue
6	White

Disable auto-shutoff timer reset on call

At address 36h: 8-bit unsigned integer value (uint8). Default value 0h.

If set to 1, the auto-shutoff timer is not reset by a call.

Unknown data

At address 37h: Unknown data of size 4h.

Unused data

At address 3bh:7: Unused data of size 0h:5:

Show color code

At address 3bh:2: boolean value.

Schow time slot

At address 3bh:1: boolean value.

Show channel type

At address 3bh:0: boolean value.

Enable FM channel free tone

At address 3ch: 8-bit unsigned integer value (uint8). Default value 0h.

Date format

At address 3dh: Enumeration of size 1h, with 2 options. Specifies the format, the date is shown in.

Value	Name	Description
0	Big Endian	YYYY/MM/DD
1	Little Endian	DD/MM/YYYY

FM mic gain

At address 3eh: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the FM microphone gain.

Valid values are [1, ..., 5], encoded as n + 1. That is, 0=1, ..., 4=5.

651.1 BT Handset Short-Press Key Functions v1.21done

Exactly 3 repetitions of Function.

Function

Enumeration of size 1h, with 60 options.

Value	Name	Description
0	Off
1	Voltage
2	Power
3	Talk Around
4	Reverse
5	DMR Encryption
6	Call
7	VFO/Channel
8	Scan
9	FM Broadcast
10	Alarm
11	Record Switch
12	Record
13	SMS
14	Dial
15	GPS Information
16	Monitor
17	Main Channel Toggle
18	Hot Key 1
19	Hot Key 2
20	Hot Key 3
21	Hot Key 4
22	Hot Key 5
23	Hot Key 6
24	Work Alone
25	Nuisance Delete
26	DMR Monitor
27	Sub Channel Toggle
28	Priority Zone
29	VFO Scan
30	Mic Sound Quality
31	Last Call Reply
32	Toggle Channel Type
33	Ranging
34	Roaming
35	Channel Ranging
36	Set Max Volume
37	Timeslot Toggle
38	APRS Type Toggle
39	Select Zone
40	A Mute
41	B Mute
42	Roaming Settings
43	APRS Settings
44	Zone increment
45	Zone decrement
46	Exit
47	Menu
48	Cross Band Repeater
49	Speaker Mode
50	Channel Name
51	Bluetooth
52	GPS
53	CTCSS/DTS Scan
54	TBST
55	APRS Send
56	FM APRS Info
57	GPS Roaming
58	Noise Reduction RX
59	Noise Reduction TX

651.2 BT Handset Long-Press Key Functions v1.21done

Exactly 3 repetitions of Function.

Functions for long-press side-keys P1-P3.

Description

A long-press is long, if it is at least 1.5s long.

Function

Enumeration of size 1h, with 60 options.

Value	Name	Description
0	Off
1	Voltage
2	Power
3	Talk Around
4	Reverse
5	DMR Encryption
6	Call
7	VFO/Channel
8	Scan
9	FM Broadcast
10	Alarm
11	Record Switch
12	Record
13	SMS
14	Dial
15	GPS Information
16	Monitor
17	Main Channel Toggle
18	Hot Key 1
19	Hot Key 2
20	Hot Key 3
21	Hot Key 4
22	Hot Key 5
23	Hot Key 6
24	Work Alone
25	Nuisance Delete
26	DMR Monitor
27	Sub Channel Toggle
28	Priority Zone
29	VFO Scan
30	Mic Sound Quality
31	Last Call Reply
32	Toggle Channel Type
33	Ranging
34	Roaming
35	Channel Ranging
36	Set Max Volume
37	Timeslot Toggle
38	APRS Type Toggle
39	Select Zone
40	A Mute
41	B Mute
42	Roaming Settings
43	APRS Settings
44	Zone increment
45	Zone decrement
46	Exit
47	Menu
48	Cross Band Repeater
49	Speaker Mode
50	Channel Name
51	Bluetooth
52	GPS
53	CTCSS/DTS Scan
54	TBST
55	APRS Send
56	FM APRS Info
57	GPS Roaming
58	Noise Reduction RX
59	Noise Reduction TX

BT Handset Mic Gain

At address 45h: 8-bit unsigned integer value (uint8). Valid values from 0h, with default value 0h.

Specifies the BT handset microphone amplification level. Valid values are 0, ..., 4.

Unknown data

At address 46h: Unknown data of size 1h.

BT Handset Backlight Duration

At address 47h: Enumeration of size 1h, with 15 options.

Value	Name	Description
0	Infinity
1	5s
2	10s
3	15s
4	20s
5	25s
6	1min
7	2min
8	3min
9	4min
10	5min
11	15min
12	35min
13	45min
14	1h

Up/Down Key Function

At address 48h: Enumeration of size 1h, with 2 options.

Value	Name	Description
0	Channel/Frequency
1	Volume

Enable TOT reminder

At address 49h: 8-bit unsigned integer value (uint8). Default value 0h.

If set to 1, five seconds before the transmit timeout, a warn tone sounds.

Enable GPS roaming.

At address 4ah: 8-bit unsigned integer value (uint8). Default value 0h.

Repeater Mode Colorcode

At address 4bh: Enumeration of size 1h, with 3 options. Either the colorcode is ignored or it must match the CC of VFO A or B.

Value	Name	Description
0	None
1	Colorcode VFO A
2	Colorcode VFO B

Repeater VFO A Timeslot

At address 4ch: Enumeration of size 1h, with 3 options.

Value	Name	Description
0	Any	Receives on one time slot and transmits on the other.
1	2	Receives on time slot 1 and transmits on 2.
2	1	Receives on time slot 2 and transmits on 1.

Repeater VFO B Timeslot

At address 4dh: Enumeration of size 1h, with 3 options.

Value	Name	Description
0	Any	Receives on one time slot and transmits on the other.
1	2	Receives on time slot 1 and transmits on 2.
2	1	Receives on time slot 2 and transmits on 1.

BT Handset RX Noise Reduction Level

At address 4eh: 8-bit unsigned integer value (uint8). Valid values from 0h, with default value 0h.

Specifies the noise reduction level. 0=Off, 1, ..., 9.

Enable BT Handset Device Shutdown

At address 4fh: 8-bit unsigned integer value (uint8). Valid values from 0h, with default value 0h.

If enabled, the radio will shut of if the handset is turned off.

651.3 BT Handset Very-Long-Press Key Functions v1.21done

Exactly 3 repetitions of Function.

Functions for very-long-press of side keys P1-P3.

Description

A long-press is very-long, if it lasts at least 3s.

Function

Enumeration of size 1h, with 60 options.

Value	Name	Description
0	Off
1	Voltage
2	Power
3	Talk Around
4	Reverse
5	DMR Encryption
6	Call
7	VFO/Channel
8	Scan
9	FM Broadcast
10	Alarm
11	Record Switch
12	Record
13	SMS
14	Dial
15	GPS Information
16	Monitor
17	Main Channel Toggle
18	Hot Key 1
19	Hot Key 2
20	Hot Key 3
21	Hot Key 4
22	Hot Key 5
23	Hot Key 6
24	Work Alone
25	Nuisance Delete
26	DMR Monitor
27	Sub Channel Toggle
28	Priority Zone
29	VFO Scan
30	Mic Sound Quality
31	Last Call Reply
32	Toggle Channel Type
33	Ranging
34	Roaming
35	Channel Ranging
36	Set Max Volume
37	Timeslot Toggle
38	APRS Type Toggle
39	Select Zone
40	A Mute
41	B Mute
42	Roaming Settings
43	APRS Settings
44	Zone increment
45	Zone decrement
46	Exit
47	Menu
48	Cross Band Repeater
49	Speaker Mode
50	Channel Name
51	Bluetooth
52	GPS
53	CTCSS/DTS Scan
54	TBST
55	APRS Send
56	FM APRS Info
57	GPS Roaming
58	Noise Reduction RX
59	Noise Reduction TX

BT Handset TX Noise Reduction Level

At address 53h: 8-bit unsigned integer value (uint8). Valid values from 0h, with default value 0h.

Specifies the noise reduction level. 0=Off, 1, ..., 9.

BT Handset VOX Level

At address 54h: 8-bit unsigned integer value (uint8). Valid values from 0h, with default value 0h.

Level -1, 0=1, 1=2, ..., 8=9.

BT Handset VOX delay

At address 55h: 8-bit unsigned integer value (uint8). Valid values from 0h, with default value 0h.

Specifies VOX delay in multiples of 0.5s. That is (n+1)*0.5s.

BT Handset Volume VFO A

At address 56h: 8-bit unsigned integer value (uint8). Valid values from 0h, with default value 0h.

BT Handset Volume VFO B

At address 57h: 8-bit unsigned integer value (uint8). Valid values from 0h, with default value 0h.

651.4 Call-end melody v1.21done

Element at address 58h of size 14h.

651.4.1 Tones v1.21done

Exactly 5 repetitions of Frequency.

Frequency

16-bit unsigned little-endian integer value (uint16le).

in Hz.

651.4.2 Durations v1.21done

Exactly 5 repetitions of Duration.

Duration

16-bit unsigned little-endian integer value (uint16le).

in ms.

651.5 All-call melody v1.21done

Element at address 6ch of size 14h.

651.5.1 Tones v1.21done

Exactly 5 repetitions of Frequency.

Frequency

16-bit unsigned little-endian integer value (uint16le).

in Hz.

651.5.2 Durations v1.21done

Exactly 5 repetitions of Duration.

Duration

16-bit unsigned little-endian integer value (uint16le).

in ms.

Header repetitions

At address 80h: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies how often the so-called voice header is repeated. Valid values are 2, ..., 8.

Unknown data

At address 81h: Unknown data of size 17fh.

652 APRS receive filter bank v1.21done

Exactly 32 repetitions of APRS filter.

653 APRS filter v1.21done

Element of size 8h.

Encodes a single APRS filter based on call and SSID.

Enable filter

At address 0h: Enumeration of size 1h, with 2 options.

Value	Name	Description
0	Off
1	On

Call

At address 1h: ASCII string of length (up to) 6 chars, 00h-padded. Specifies the call to filter.

SSID

At address 7h: 8-bit unsigned integer value (uint8). Default value 10h.

Specifies the SSID of the call. Valid values 0h-fh, 10h = Off.

654 GPS roaming zone bank v1.21done

Exactly 32 repetitions of GPS roaming zone.

Encodes up to 32 GPS roaming zones.

655 GPS roaming zone v1.21done

Element of size 20h.

Encodes a single GPS roaming zone.

Description

That is, a position and radio defining a region associated with a certain roaming zone. Whenever the radio enters this region, the associated roaming zone gets selected.

Zone enable

At address 0h: Enumeration of size 1h, with 2 options.

Value	Name	Description
0	Off
1	On

Roaming zone index

At address 1h: 8-bit unsigned integer value (uint8). Default value ffh.

Specifies the roaming zone index to use. If set to ffh, the zone is disabled.

Latitude degree

At address 2h: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the integer part of the latitude in degrees.

Valid value range 0-89.

Latitude minutes

At address 3h: 8-bit unsigned integer value (uint8). Default value 0h.

Encodes the integer latitude minute part.

Valid value range 0-59.

Latitude centi-minute

At address 4h: 8-bit unsigned integer value (uint8).

Encodes the 1/100th of a minute.

Valid value range 0-99.

Latitude hemisphere

At address 5h: Enumeration of size 1h, with 2 options.

Value	Name	Description
0	North
1	South

Longitude degrees

At address 6h: 8-bit unsigned integer value (uint8). Default value 0h.

Encodes the integer part of the latitude degree.

Valid value range 0-179.

Longitude minutes

At address 7h: 8-bit unsigned integer value (uint8). Default value 0h.

Encodes the longitude minutes.

Valid value range 0-59.

Longitude centi-minutes

At address 8h: 8-bit unsigned integer value (uint8). Default value 0h.

Encodes the 1/100th part of the minute.

Valid value range 0-99.

Longitude hemisphere

At address 9h: Enumeration of size 1h, with 2 options.

Value	Name	Description
0	East
1	West

Unused data

At address ah: Unused data of size 2h: 00

Radius

At address ch: 16-bit unsigned little-endian integer value (uint16le). Default value 0h.

The unit is specified in the setting.

Unused data

At address eh: Unused data of size 12h: 00

656 Zone Names v1.21done

Between 1 and 250 repetitions of Zone Name.

Zone Name

ASCII string of length (up to) 32 chars, 00h-padded.

657 Zone Names v1.21done

Between 1 and 250 repetitions of Zone Name.

Zone Name

ASCII string of length (up to) 32 chars, 00h-padded.

658 Radio Ids v1.21done

Up to 250 repetitions of Radio Id Element.

659 Radio Id Element v1.21done

Element of size 20h.

DMR Id

At address 0h: 32-bit bcd big-endian integer value (bcd8be).

Pad byte

At address 4h: Unused data of size 1h: 00

Name

At address 5h: ASCII string of length (up to) 16 chars, 00h-padded.

Unused data

At address 15h: Unused data of size bh: 00

660 FM Quick Call Bank v1.21done

Element at address 25c0000h of size 100h.

660.1 FM Quick Calls v1.21done

Exactly 4 repetitions of FM Qick Call.

660.2 FM Qick Call v1.21done

Element of size 2h.

Type

At address 0h: Enumeration of size 1h, with 4 options.

Value	Name	Description
0	None
1	DTMF
2	Two-Tone
3	Five-Tone

Analog Contact Index

At address 1h: 8-bit unsigned integer value (uint8). Default value 0h.

0-based index, ffh=none.

Unused data

At address 8h: Unused data of size f8h: 00

661 Status Messages v1.21done

Exactly 32 repetitions of Status Message.

Status Message

ASCII string of length (up to) 32 chars, 00h-padded.

662 Hot-Key Settings v1.21done

Exactly 18 repetitions of Hot-Key Setting.

663 Hot-Key Setting v1.21done

Element of size 30h.

Type

At address 0h: Enumeration of size 1h, with 2 options.

Value	Name	Description
0	Call
1	Menu

Menu Item

At address 1h: Enumeration of size 1h, with 16 options.

Value	Name	Description
0	None
1	Show SMS Menu
2	Show New SMS Menu
3	Show Hot Text Menu
4	Show SMS Inbox
5	Show SMS Outbox
6	Show Contacts
7	Show Menual Dial Menu
8	Show Call Log
9	Show outgoing calls
10	Show received calls
11	Show missed call
12	Show Zone menu
13	Show Radio Settings Menu
14	Show Channel Settings Menu
15	Speaker mode

Call Type

At address 2h: Enumeration of size 1h, with 2 options.

Value	Name	Description
0	FM
1	DMR

DMR Call Type

At address 3h: Enumeration of size 1h, with 7 options.

Value	Name	Description
255	Off
0	Group Call
1	Private Call
2	All Call
3	Hot Text
4	Call Tip
5	Status Message

Contact Index

At address 4h: 32-bit unsigned little-endian integer value (uint32le). Default value 0h.

0-based index, ffffffffh = none.

Used for both, FM and DMR contacts.

Message Index

At address 8h: 8-bit unsigned integer value (uint8). Default value ffh.

0-based SMS message index or status message index. ffh = none.

Unused data

At address 9h: Unused data of size 27h:

664 Status Message Bitmap Element v1.21done

Element at address 25c0b00h of size 10h.

664.1 Status Message Bitmap v1.21done

Exactly 32 repetitions of Status Message Bit.

Status Message Bit

boolean value. Default value 0h.

Unused data

At address 4h: Unused data of size ch: 00

665 Group List Bitmap Element v1.21done

Element at address 25c0b10h of size 20h.

665.1 Group List Bitmap v1.21done

Exactly 250 repetitions of Group List Enable.

Group List Enable

boolean value.

Unused data

At address 1fh:5: Unused data of size 0h:6:

666 ARC4 encryption keys v1.21done

Exactly 255 repetitions of ARC4 encryption key.

667 ARC4 encryption key v1.21done

Element of size 10h.

Key id

At address 0h: 8-bit unsigned integer value (uint8). Default value 0h.

Valid values 1-255. 0=Off.

Key bits

At address 1h: 40-bit unsigned big-endian integer value (uint40be). Default value 0h.

Unused data

At address 6h: Unused data of size ah: 00

668 ARC4 key bitmap v1.21done

Element at address 25c1c00h of size 20h.

668.1 ARC4 enable bits v1.21done

Exactly 255 repetitions of Key enable bit.

Key enable bit

boolean value.

Unused data

At address 1fh:0: Unused data of size 0h:1: 00

669 Valid contact indices v1.21done

Exactly 10000 repetitions of Contact index.

Some weird contact index map, containing the indices of up to 10000 valid contacts.

Contact index

32-bit unsigned little-endian integer value (uint32le). Default value ffffffffh.

Specifies the index of a valid contact.

670 Contact Bitmap Element v1.21done

Element at address 2640000h of size 4f0h.

670.1 Contact Bitmap v1.21done

Exactly 10000 repetitions of Contact disable bit.

Contact disable bit

boolean value. Default value 0h.

Unused data

At address 4e2h: Unused data of size eh: 00

671 Contact banks v1.21done

Up to 10 repetitions of Contact Bank.

672 Contact Bank v1.21done

Up to 10000 repetitions of Contact.

673 Contact v1.21done

Element of size 64h.

Call Type

At address 0h: Enumeration of size 1h, with 3 options. Specifies the call type of the contact.

Value	Name	Description
0	Private Call
1	Group Call
2	All Call

Name

At address 1h: ASCII string of length (up to) 16 chars, 00h-padded.

Unused data

At address 11h: Unused data of size 12h: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

DMR ID

At address 23h: 32-bit bcd big-endian integer value (bcd8be).

Call Alert

At address 27h: Enumeration of size 1h, with 0 options.

Unused data

At address 28h: Unused data of size 3ch:

674 Analog Contact Index List v1.21done

Exactly 128 repetitions of Analog Contact Index.

Analog Contact Index

8-bit unsigned integer value (uint8).

Stores the 0-based index of the i-th entry.

If not set, set to ffh.

675 Analog Contact ByteMap v1.21done

Exactly 128 repetitions of Analog Contact Enable Byte.

Analog Contact Enable Byte

8-bit unsigned integer value (uint8).

Inverted bytemap for every contact entry. 0=enabled, ffh = disabled

676 Analog Contacts v1.21done

Up to 128 repetitions of DTMF Contact.

677 DTMF Contact v1.21done

Element of size 18h.

DTMF Number

At address 0h: 56-bit bcd big-endian integer value (bcd14be).

Number Length

At address 7h: 8-bit unsigned integer value (uint8).

Name

At address 8h: ASCII string of length (up to) 15 chars, 00h-padded.

Pad Byte

At address 17h: Unused data of size 1h: 00

678 Group List Bank v1.21done

Up to 250 repetitions of Group List.

679 Group List v1.21done

Element of size 120h.

679.1 Contact Indices v1.21done

Exactly 64 repetitions of Contact Index.

Contact Index

32-bit unsigned little-endian integer value (uint32le). Default value ffffffffh.

0-based

Name

At address 100h: ASCII string of length (up to) 16 chars, 00h-padded.

Unused data

At address 110h: Unused data of size 10h:

680 Air Band Channel Bank v1.21done

Up to 100 repetitions of Air Band Channel.

681 Air Band Channel v1.21done

Element of size 20h.

Frequency

At address 0h: 32-bit bcd big-endian integer value (bcd8be). Default value 10800000h.

Specifies the channel frequency in multiples of 10Hz.

Channel Name

At address 4h: ASCII string of length (up to) 16 chars, 00h-padded.

Unused data

At address 14h: Unused data of size ch:

682 Air Band VFO Channel v1.21done

Element at address 2bc1000h of size 20h.

Frequency

At address 0h: 32-bit bcd big-endian integer value (bcd8be). Default value 10800000h.

Unused data

At address 4h: Unused data of size 1ch: 00

683 Air Band Channel Bitmap v1.21done

Element at address 2bc1020h of size 20h.

683.1 Channel Bitmap v1.21done

Exactly 100 repetitions of Channel Enable Bit.

Channel Enable Bit CEB

boolean value.

Unused data

At address ch:3: Unused data of size 13h:4:

684 Air Band Scan Enable Bitmap v1.21done

Element at address 2bc1040h of size 20h.

684.1 Scan Enable Bits v1.21done

Exactly 100 repetitions of Scan Enable Bit.

Scan Enable Bit

boolean value. Default value 0h.

If set, the corresponding channel is included in the air band scan.

Unused data

At address ch:3: Unused data of size 13h:4: 00

685 Call-sign Index Banks v1.21done

Some repetitions of None.

686 Call-sign Index Bank v1.21done

Up to 16000 repetitions of Call-sign Index Entry.

687 Call-sign Index Entry v1.21done

Element of size 8h.

DMR ID and Group Call Flag

At address 0h: 32-bit unsigned little-endian integer value (uint32le).

1) | GCF

Contact Offset

At address 4h: 32-bit unsigned little-endian integer value (uint32le).

688 Contact Map v1.21done

Up to 10000 repetitions of Contact Map Entry.

689 Contact Map Entry v1.21done

Element of size 8h.

DMR ID and Group Call Flag

At address 0h: 32-bit unsigned little-endian integer value (uint32le).

1) | GCF

Contact Index

At address 4h: 32-bit unsigned little-endian integer value (uint32le).

690 Call-sign Database Limits v1.21done

Element at address 4840000h of size 10h.

Entry Count

At address 0h: 32-bit unsigned little-endian integer value (uint32le). Default value 0h.

Specifies the number of entries in the call-sign database.

End-of-database address

At address 4h: 32-bit unsigned little-endian integer value (uint32le).

Absolute memory address of the end-of-database.

Unknown data

At address 8h: Unknown data of size 8h.

691 Call-sign DB Banks v1.21done

Up to 20000 repetitions of Call-sign database bank.

692 Call-sign database bank v1.21done

Up to 1000 repetitions of Call-sign database entry.

693 Call-sign database entry v1.21done

Element of size 64h.

Call Type

At address 0h: Enumeration of size 1h, with 3 options.

Value	Name	Description
0	Private Call
1	Group Call
2	All Call

DMR ID

At address 1h: 32-bit bcd big-endian integer value (bcd8be). Default value 0h.

Unknown data

At address 5h: Unknown data of size 0h:3.

Friend Flag

At address 5h:4: boolean value. Default value 0h.

Unknown data

At address 5h:3: Unknown data of size 0h:2.

Ring Tone

At address 5h:1: 2-bit unsigned integer value (uint2). Default value 0h.

Description

At address 6h: ASCII string of length (up to) 93 chars, 00h-padded. A 0-separated list of strings. Containing name, city, call, state, country, comment.

Pad byte

At address 63h: Unused data of size 1h: 00