Address	Element	Description
800000h	Channel banks	A sparse series of channel banks.
802000h	Channel extension banks	A series of channel extension banks corresponding to each encoded channel bank.
fc0800h	VFO channel A	Encodes VFO channel A.
fc0840h	VFO channel B	Encodes VFO channel B.
fc2800h	VFO A channel extension	Encodes additional channel information for VFO A.
fc2840h	VFO B channel extension	Encodes additional channel information for VFO B.
1000000h	Zone channel lists.
1040000h	Roaming channel bank	Encodes a bank of up to 250 roaming channels.
1042000h	Roaming channel bitmap
1042080h	Roaming zone bitmap
1043000h	Roaming zone bank	A collection of up to 64 roaming zones.
1080000h	Scan list banks
1640000h	Message linked list
1640800h	Message byte-map
2140000h	Message banks
2480000h	FM broadcast channel frequencies
2480200h	FM broadcast VFO frequency
2480210h	FM broadcast channel bitmap
2480220h	FM broadcast channel scan bitmap
24c0000h	5-Tone IDs
24c0c80h	5-Tone id bitmap
24c0d00h	5-Tone functions	Defines up to 16 functions, that can be triggered by a 5-tone id.
24c1000h	5-Tone settings
24c1080h	DTMF Settings
24c1100h	2-Tone Ids
24c1280h	2-Tone Id bitmap	Specifies, which 2-tone id is valid.
24c1290h	2-Tone Settings
24c1300h	Zone Bitmap Element
24c1320h	Radio Id Bitmap Element
24c1340h	Scan List Bitmap Element
24c1360h	Hidden zone bitmap
24c1400h	Alarm Settings
24c1440h	DMR Alarm Extension
24c1500h	Channel Bitmap Element
24c1700h	DMR Encryption IDs
24c1800h	DMR Encryption Keys
24c2000h	Auto repeater offset frequency bank	Holds up to 250 offset frequencies for the auto-repeater feature.
24c2400h	2-Tone functions	Encodes up to 16 two-tone functions.
24c2600h	2-Tone function bitmap
24c4000h	AES encryption key bank
24c8000h	AES encryption key bitmap
2500000h	General Settings
2500100h	B channels	B channel.
2500500h	DTMF Ids	Encodes DTMF PTT ids.
2500600h	Boot Settings
2501000h	APRS settings
2501280h	DMR APRS message
2501400h	General Settings Extension
2501800h	APRS receive filter bank
2504000h	GPS roaming zone bank	Encodes up to 32 GPS roaming zones.
2540000h	Zone Names
2580000h	Radio Ids
2582000h	Primary ID Settings
25c0000h	FM Quick Call Bank
25c0100h	Status Messages
25c0500h	Hot-Key Settings
25c0b00h	Status Message Bitmap Element
25c0b10h	Group List Bitmap Element
25c0c00h	ARC4 encryption keys
25c1c00h	ARC4 key bitmap
2600000h	Valid contact indices	Some weird contact index map, containing the indices of up to 10000 valid contacts.
2640000h	Contact Bitmap Element
2680000h	Contact banks
2900000h	Analog Contact Index List
2900100h	Analog Contact ByteMap
2940000h	Analog Contacts
2980000h	Group List Bank
4000000h	Call-sign Index Banks
4800000h	Contact Map
4840000h	Call-sign Database Limits
5500000h	Call-sign DB Banks

482 Channel banks v2.40done

Between 1 and 32 repetitions of Channel Bank.

A sparse series of channel banks.

483 Channel Bank v2.40done

Between 1 and 128 repetitions of Channel.

A single channel bank, holding up to 128 Channels.

484 Channel v2.40done

Element of size 40h.

Encodes a single FM or DMR channel.

RX Frequency

At address 0h: 32-bit bcd big-endian integer value (bcd8be).

Specifies the reception frequency.

Frequency is specified in 10Hz.

TX Frequency Offset

At address 4h: 32-bit bcd big-endian integer value (bcd8be).

Specifies the transmit frequency offset.

The frequency is stored in 10Hz. The offset direction is stored separately.

Repeater direction Rep Dir

At address 8h:7: Enumeration of size 0h:2, with 3 options. Specifies the offset direction for the repeater mode.

Value	Name	Description
0	Simplex	RX = TX Frequency
1	Positive	TX = RX + Offset
2	Negative	TX = RX - Offset

Bandwidth BW

At address 8h:5: Enumeration of size 0h:2, with 2 options. Specifies the bandwidth of the FM channel. DMR channels are always 12.5kHz wide.

Value	Name	Description
0	Narrow (12.5kHz)
1	Wide (25kHz)

Transmit power PWR

At address 8h:3: Enumeration of size 0h:2, with 4 options. Specifies the transmit power of the channel.

Value	Name	Description
0	Low
1	Medium
2	High
3	Turbo

Channel mode CMode

At address 8h:1: Enumeration of size 0h:2, with 4 options. Specifies the mode of the channel.

Value	Name	Description
0	FM
1	DMR
2	FM + DMR RX
3	DMR + FM RX

Enable talkaround TlkAr

At address 9h:7: boolean value. Default value 0h.

Call confirm ClCnf

At address 9h:6: boolean value. Default value 0h.

Enable RX only RXO

At address 9h:5: boolean value. Default value 0h.

If enabled, no transmission is possible on this channel.

Enable CTCSS phase reversal PhRev

At address 9h:4: boolean value. Default value 0h.

Enable TX DCS TX DCS

At address 9h:3: boolean value. Default value 0h.

Enable TX CTCSS TX CTC

At address 9h:2: boolean value.

Enable RX DCS RX DCS

At address 9h:1: boolean value. Default value 0h.

Enable RX CTCSS RX CTC

At address 9h:0: boolean value. Default value 0h.

TX Tone CTCSS

At address ah: Enumeration of size 1h, with 51 options.

Value	Name	Description
0	62.5 Hz
1	67.0 Hz
2	69.3 Hz
3	71.9 Hz
4	74.4 Hz
5	77.0 Hz
6	79.7 Hz
7	82.5 Hz
8	85.4 Hz
9	88.5 Hz
10	91.5 Hz
11	94.8 Hz
12	97.4 Hz
13	100.0 Hz
14	103.5 Hz
15	107.2 Hz
16	110.9 Hz
17	114.8 Hz
18	118.8 Hz
19	123.0 Hz
20	127.3 Hz
21	131.8 Hz
22	136.5 Hz
23	141.3 Hz
24	146.2 Hz
25	151.4 Hz
26	156.7 Hz
27	159.8 Hz
28	162.2 Hz
29	165.5 Hz
30	167.9 Hz
31	171.3 Hz
32	173.8 Hz
33	177.3 Hz
34	179.9 Hz
35	183.5 Hz
36	186.2 Hz
37	189.9 Hz
38	192.8 Hz
39	196.6 Hz
40	199.5 Hz
41	203.5 Hz
42	206.5 Hz
43	210.7 Hz
44	218.1 Hz
45	225.7 Hz
46	229.1 Hz
47	233.6 Hz
48	241.8 Hz
49	250.3 Hz
50	254.1 Hz

RX Tone CTCSS

At address bh: Enumeration of size 1h, with 51 options.

Value	Name	Description
0	62.5 Hz
1	67.0 Hz
2	69.3 Hz
3	71.9 Hz
4	74.4 Hz
5	77.0 Hz
6	79.7 Hz
7	82.5 Hz
8	85.4 Hz
9	88.5 Hz
10	91.5 Hz
11	94.8 Hz
12	97.4 Hz
13	100.0 Hz
14	103.5 Hz
15	107.2 Hz
16	110.9 Hz
17	114.8 Hz
18	118.8 Hz
19	123.0 Hz
20	127.3 Hz
21	131.8 Hz
22	136.5 Hz
23	141.3 Hz
24	146.2 Hz
25	151.4 Hz
26	156.7 Hz
27	159.8 Hz
28	162.2 Hz
29	165.5 Hz
30	167.9 Hz
31	171.3 Hz
32	173.8 Hz
33	177.3 Hz
34	179.9 Hz
35	183.5 Hz
36	186.2 Hz
37	189.9 Hz
38	192.8 Hz
39	196.6 Hz
40	199.5 Hz
41	203.5 Hz
42	206.5 Hz
43	210.7 Hz
44	218.1 Hz
45	225.7 Hz
46	229.1 Hz
47	233.6 Hz
48	241.8 Hz
49	250.3 Hz
50	254.1 Hz

TX DCS code

At address ch: 16-bit unsigned little-endian integer value (uint16le). Default value 0h.

Encodes the DCS code in a complex way.

The least significant 9 bits encode the binary DCS code. The 9th bit encodes the inversion flag.

RX DCS code

At address eh: 16-bit unsigned little-endian integer value (uint16le). Default value 0h.

Encodes the DCS code in a complex way.

The least significant 9 bits encode the binary DCS code. The 9th bit encodes the inversion flag.

Custom CTCSS frequency

At address 10h: 16-bit signed little-endian integer value (int16le). Default value 0h.

Specifies a custom CTCSS frequency in 0.1Hz.

Two-tone decode index

At address 12h: 16-bit unsigned little-endian integer value (uint16le). Default value 0h.

Specifies the two-tone decode index.

Transmit contact index

At address 14h: 32-bit unsigned little-endian integer value (uint32le). Default value 0h.

Contact index, 0-based.

Radio ID index

At address 18h: 8-bit unsigned integer value (uint8). Default value 0h.

Unused data

At address 19h:7: Unused data of size 0h:1:

Squelch Mode

At address 19h:6: Enumeration of size 0h:3, with 4 options.

Value	Name	Description
0	Carrier
1	CTCSS/DSC
2	Optional Signaling
3	CTCSS/DSC and Optional Signaling

Unused data

At address 19h:3: Unused data of size 0h:2:

FM PTT ID transmission mode TX PTT ID

At address 19h:1: Enumeration of size 0h:2, with 4 options. Specifies when to transmit the FM PTT id.

Value	Name	Description
0	Off
1	Start
2	End
3	Both

Unused data

At address 1ah:7: Unused data of size 0h:2: 00

Optional Signaling Opt Sig

At address 1ah:5: Enumeration of size 0h:2, with 4 options.

Value	Name	Description
0	Off
1	DTMF
2	two-tone
3	five-tone

Unknown data

At address 1ah:3: Unknown data of size 0h:2.

Admit Criterium Adm Crit

At address 1ah:1: Enumeration of size 0h:2, with 4 options. This is a mess. Similar admid criteria for FM and DMR are encoded differently. E.g., channel free and different CC/tone.

Value	Name	Description
0	Always
1	Channel Free	DMR: channel Free, FM: different CTCSS/DCS tone.
2	Different color code	DMR: different CC; FM: channel free
3	Same color code

Scan list index

At address 1bh: 8-bit unsigned integer value (uint8). Default value 0h.

Scan list index, 0-based.

None = 0xff.

Group List index

At address 1ch: 8-bit unsigned integer value (uint8). Default value ffh.

Specifies the group list index.

A 0-based index of the group list. If not set, 0xff.

Two-tone Id

At address 1dh: 8-bit unsigned integer value (uint8).

Five-tone Id

At address 1eh: 8-bit unsigned integer value (uint8).

DTMF Id

At address 1fh: 8-bit unsigned integer value (uint8).

Colorcode

At address 20h: 8-bit unsigned integer value (uint8).

Enable Lone Worker LWk

At address 21h:7: boolean value. Default value 0h.

Unknown data

At address 21h:6: Unknown data of size 0h:1.

Enable APRS RX APRSr

At address 21h:5: boolean value.

Unknown data

At address 21h:4: Unknown data of size 0h:1.

DCMA mode DCMA

At address 21h:3: Enumeration of size 0h:2, with 3 options.

Value	Name	Description
0	Off
1	DCMA Double Slot
2	DCMA Sinlge Slot

Enable SMS Confirmation SMS ACK

At address 21h:1: boolean value. Default value 0h.

Time Slot TS

At address 21h:0: Enumeration of size 0h:1, with 2 options.

Value	Name	Description
0	Time Slot 1
1	Time Slot 2

AES encryption key index

At address 22h: 8-bit unsigned integer value (uint8).

Name

At address 23h: ASCII string of length (up to) 16 chars, 00h-padded.

Pad Byte

At address 33h: Unused data of size 1h: 00

Unknown data

At address 34h: Unknown data of size 0h:3.

Auto scan AuSc

At address 34h:4: boolean value. Default value 0h.

Disable data ACK dACK

At address 34h:3: boolean value.

Exclude channel from roaming nRoam

At address 34h:2: boolean value. Default value 0h.

Enable Simplex Smplx

At address 34h:1: boolean value. Default value 0h.

Enables the simplex mode.

That is, RX = TX frequency.

Enable ranging Rngng

At address 34h:0: boolean value.

APRS Type

At address 35h: Enumeration of size 1h, with 3 options.

Value	Name	Description
0	None
1	FM ARPS
2	DMR APRS

FM APRS PTT mode

At address 36h: Enumeration of size 1h, with 3 options. Specifies, when to send the APRS information.

Value	Name	Description
0	Off
1	Start of transmission
2	End of transmission

DMR APRS PTT mode

At address 37h: Enumeration of size 1h, with 2 options.

Value	Name	Description
0	Off
1	On

DMR APRS channel index

At address 38h: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the DMR APRS channel setting index. A value in [0,7].

Frequency correction

At address 39h: 8-bit signed integer value (int8).

Specifies the frequency correction in multiples of 10Hz.

Unknown data

At address 3ah: Unknown data of size 1h.

Unknown data

At address 3bh: Unknown data of size 0h:2.

Encryption type CrypType

At address 3bh:5: Enumeration of size 0h:1, with 2 options. Specifies the encryption type.

Value	Name	Description
0	AES
1	ARC4

Send talker alias TalkAl

At address 3bh:4: boolean value. Default value 0h.

Mute FM APRS nAPRS

At address 3bh:3: boolean value. Default value 0h.

SMS forbid nSMS

At address 3bh:2: boolean value.

Random Key

At address 3bh:1: boolean value.

Multiple Keys

At address 3bh:0: boolean value.

FM APRS frequency index

At address 3ch: 8-bit unsigned integer value (uint8). Default value 0h.

A value in range [0,7].

ARC4 key index

At address 3dh: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the key index for ARC4 encryption.

This index is idx+1, that is 0=Off, 1=key 0, 2 = key 1, ...

Unknown data

At address 3eh: Unknown data of size 2h.

485 Channel extension banks

Between 1 and 32 repetitions of Channel extension bank.

A series of channel extension banks corresponding to each encoded channel bank.

486 Channel extension bank

Between 1 and 128 repetitions of Channel extension.

Encodes several channel extensions corresponding to each encoded channel.

487 Channel extension

Element of size 40h.

Encodes additional channel information.

5 Tone PTT ID index BOT

At address 0h: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the index of the begin-of-transmission 5 tone PTT ID to send.

5 Tone PTT ID index EOT

At address 1h: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the index of the 5 tone end-of-transmission PTT ID to send.

Unknown data

At address 2h: Unknown data of size 1h.

TX color code TX CC

At address 3h: 8-bit unsigned integer value (uint8). Default value 1h.

Sets the transmit color code.

Usually, this should be equal to the RX color code.

Unknown data

At address 4h: Unknown data of size 3ch.

488 VFO channel A v2.40done

Element at address fc0800h of size 40h.

Encodes VFO channel A.

Description

Same ecoding as a normal channel.

RX Frequency

At address 0h: 32-bit bcd big-endian integer value (bcd8be).

Specifies the reception frequency.

Frequency is specified in 10Hz.

TX Frequency Offset

At address 4h: 32-bit bcd big-endian integer value (bcd8be).

Specifies the transmit frequency offset.

The frequency is stored in 10Hz. The offset direction is stored separately.

Repeater direction

At address 8h:7: Enumeration of size 0h:2, with 3 options. Specifies the offset direction for the repeater mode.

Value	Name	Description
0	Simplex	RX = TX Frequency
1	Positive	TX = RX + Offset
2	Negative	TX = RX - Offset

Bandwidth

At address 8h:5: Enumeration of size 0h:2, with 2 options. Specifies the bandwidth of the FM channel. DMR channels are always 12.5kHz wide.

Value	Name	Description
0	Narrow (12.5kHz)
1	Wide (25kHz)

Transmit power

At address 8h:3: Enumeration of size 0h:2, with 4 options. Specifies the transmit power of the channel.

Value	Name	Description
0	Low
1	Medium
2	High
3	Turbo

Channel mode

At address 8h:1: Enumeration of size 0h:2, with 4 options. Specifies the mode of the channel.

Value	Name	Description
0	FM
1	DMR
2	FM + DMR RX
3	DMR + FM RX

Enable talkaround TlkAr

At address 9h:7: boolean value. Default value 0h.

Call confirm

At address 9h:6: boolean value. Default value 0h.

Enable RX only RXO

At address 9h:5: boolean value. Default value 0h.

If enabled, no transmission is possible on this channel.

Enable CTCSS phase reversal

At address 9h:4: boolean value. Default value 0h.

Enable TX DCS

At address 9h:3: boolean value. Default value 0h.

Enable TX CTCSS

At address 9h:2: boolean value.

Enable RX DCS

At address 9h:1: boolean value. Default value 0h.

Enable RX CTCSS

At address 9h:0: boolean value. Default value 0h.

TX Tone CTCSS

At address ah: Enumeration of size 1h, with 51 options.

Value	Name	Description
0	62.5 Hz
1	67.0 Hz
2	69.3 Hz
3	71.9 Hz
4	74.4 Hz
5	77.0 Hz
6	79.7 Hz
7	82.5 Hz
8	85.4 Hz
9	88.5 Hz
10	91.5 Hz
11	94.8 Hz
12	97.4 Hz
13	100.0 Hz
14	103.5 Hz
15	107.2 Hz
16	110.9 Hz
17	114.8 Hz
18	118.8 Hz
19	123.0 Hz
20	127.3 Hz
21	131.8 Hz
22	136.5 Hz
23	141.3 Hz
24	146.2 Hz
25	151.4 Hz
26	156.7 Hz
27	159.8 Hz
28	162.2 Hz
29	165.5 Hz
30	167.9 Hz
31	171.3 Hz
32	173.8 Hz
33	177.3 Hz
34	179.9 Hz
35	183.5 Hz
36	186.2 Hz
37	189.9 Hz
38	192.8 Hz
39	196.6 Hz
40	199.5 Hz
41	203.5 Hz
42	206.5 Hz
43	210.7 Hz
44	218.1 Hz
45	225.7 Hz
46	229.1 Hz
47	233.6 Hz
48	241.8 Hz
49	250.3 Hz
50	254.1 Hz

RX Tone CTCSS

At address bh: Enumeration of size 1h, with 51 options.

Value	Name	Description
0	62.5 Hz
1	67.0 Hz
2	69.3 Hz
3	71.9 Hz
4	74.4 Hz
5	77.0 Hz
6	79.7 Hz
7	82.5 Hz
8	85.4 Hz
9	88.5 Hz
10	91.5 Hz
11	94.8 Hz
12	97.4 Hz
13	100.0 Hz
14	103.5 Hz
15	107.2 Hz
16	110.9 Hz
17	114.8 Hz
18	118.8 Hz
19	123.0 Hz
20	127.3 Hz
21	131.8 Hz
22	136.5 Hz
23	141.3 Hz
24	146.2 Hz
25	151.4 Hz
26	156.7 Hz
27	159.8 Hz
28	162.2 Hz
29	165.5 Hz
30	167.9 Hz
31	171.3 Hz
32	173.8 Hz
33	177.3 Hz
34	179.9 Hz
35	183.5 Hz
36	186.2 Hz
37	189.9 Hz
38	192.8 Hz
39	196.6 Hz
40	199.5 Hz
41	203.5 Hz
42	206.5 Hz
43	210.7 Hz
44	218.1 Hz
45	225.7 Hz
46	229.1 Hz
47	233.6 Hz
48	241.8 Hz
49	250.3 Hz
50	254.1 Hz

TX DCS code

At address ch: 16-bit unsigned little-endian integer value (uint16le). Default value 0h.

Encodes the DCS code in a complex way.

The least significant 9 bits encode the binary DCS code. The 9th bit encodes the inversion flag.

RX DCS code

At address eh: 16-bit unsigned little-endian integer value (uint16le). Default value 0h.

Encodes the DCS code in a complex way.

The least significant 9 bits encode the binary DCS code. The 9th bit encodes the inversion flag.

Custom CTCSS frequency

At address 10h: 16-bit signed little-endian integer value (int16le). Default value 0h.

Specifies a custom CTCSS frequency in 0.1Hz.

Two-tone decode index

At address 12h: 16-bit unsigned little-endian integer value (uint16le). Default value 0h.

Specifies the two-tone decode index.

Transmit contact index

At address 14h: 32-bit unsigned little-endian integer value (uint32le). Default value 0h.

Contact index, 0-based.

Radio ID index

At address 18h: 8-bit unsigned integer value (uint8). Default value 0h.

Unknown data

At address 19h: Unknown data of size 0h:6.

FM PTT ID transmission mode TX PTT ID

At address 19h:1: Enumeration of size 0h:2, with 4 options. Specifies when to transmit the FM PTT id.

Value	Name	Description
0	Off
1	Start
2	End
3	Both

Unused data

At address 1ah:7: Unused data of size 0h:2: 00

Optional Signaling

At address 1ah:5: Enumeration of size 0h:2, with 4 options.

Value	Name	Description
0	Off
1	DTMF
2	two-tone
3	five-tone

Unknown data

At address 1ah:3: Unknown data of size 0h:2.

Admit Criterium

At address 1ah:1: Enumeration of size 0h:2, with 4 options. This is a mess. Similar admid criteria for FM and DMR are encoded differently. E.g., channel free and different CC/tone.

Value	Name	Description
0	Always
1	Channel Free	DMR: channel Free, FM: different CTCSS/DCS tone.
2	Different color code	DMR: different CC; FM: channel free
3	Same color code

Scan list index

At address 1bh: 8-bit unsigned integer value (uint8). Default value 0h.

Scan list index, 0-based.

None = 0xff.

Group List index

At address 1ch: 8-bit unsigned integer value (uint8). Default value ffh.

Specifies the group list index.

A 0-based index of the group list. If not set, 0xff.

Two-tone Id

At address 1dh: 8-bit unsigned integer value (uint8).

Five-tone Id

At address 1eh: 8-bit unsigned integer value (uint8).

DTMF Id

At address 1fh: 8-bit unsigned integer value (uint8).

Colorcode

At address 20h: 8-bit unsigned integer value (uint8).

Enable Lone Worker LWk

At address 21h:7: boolean value. Default value 0h.

Unknown data

At address 21h:6: Unknown data of size 0h:1.

Enable APRS RX APRSr

At address 21h:5: boolean value.

Unknown data

At address 21h:4: Unknown data of size 0h:1.

DCMA mode

At address 21h:3: Enumeration of size 0h:2, with 3 options.

Value	Name	Description
0	Off
1	DCMA Double Slot
2	DCMA Sinlge Slot

Enable SMS Confirmation SMS ACK

At address 21h:1: boolean value. Default value 0h.

Time Slot

At address 21h:0: Enumeration of size 0h:1, with 2 options.

Value	Name	Description
0	Time Slot 1
1	Time Slot 2

AES encryption key index

At address 22h: 8-bit unsigned integer value (uint8).

Name

At address 23h: ASCII string of length (up to) 16 chars, 00h-padded.

Pad Byte

At address 33h: Unused data of size 1h: 00

Unknown data

At address 34h: Unknown data of size 0h:3.

Auto scan

At address 34h:4: boolean value. Default value 0h.

Disable data ACK dACK

At address 34h:3: boolean value.

Exclude channel from roaming

At address 34h:2: boolean value. Default value 0h.

Enable Simplex Smplx

At address 34h:1: boolean value. Default value 0h.

Enables the simplex mode.

That is, RX = TX frequency.

Enable ranging Rngng

At address 34h:0: boolean value.

APRS Type

At address 35h: Enumeration of size 1h, with 3 options.

Value	Name	Description
0	None
1	FM ARPS
2	DMR APRS

DMR APRS PTT mode

At address 36h: Enumeration of size 1h, with 3 options.

Value	Name	Description
0	Off
1	Start of transmission
2	End of transmission

FM APRS PTT mode

At address 37h: Enumeration of size 1h, with 2 options.

Value	Name	Description
0	Off
1	On

DMR APRS channel index

At address 38h: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the DMR APRS channel setting index. A value in [0,7].

Frequency correction

At address 39h: 8-bit signed integer value (int8).

Specifies the frequency correction in multiples of 10Hz.

Unknown data

At address 3ah: Unknown data of size 1h.

Unknown data

At address 3bh: Unknown data of size 0h:2.

Encryption type CrypType

At address 3bh:5: Enumeration of size 0h:1, with 2 options. Specifies the encryption type.

Value	Name	Description
0	AES
1	ARC4

Send talker alias Send TalkAl

At address 3bh:4: boolean value. Default value 0h.

Mute FM APRS

At address 3bh:3: boolean value. Default value 0h.

SMS forbid

At address 3bh:2: boolean value.

Random Key

At address 3bh:1: boolean value.

Multiple Keys

At address 3bh:0: boolean value.

FM APRS frequency index

At address 3ch: 8-bit unsigned integer value (uint8). Default value 0h.

A value in range [0,7].

ARC4 key index

At address 3dh: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the key index for ARC4 encryption.

This index is idx+1, that is 0=Off, 1=key 0, 2 = key 1, ...

Unknown data

At address 3eh: Unknown data of size 2h.

489 VFO channel B v2.40done

Element at address fc0840h of size 40h.

Encodes VFO channel B.

Description

Same ecoding as a normal channel.

RX Frequency

At address 0h: 32-bit bcd big-endian integer value (bcd8be).

Specifies the reception frequency.

Frequency is specified in 10Hz.

TX Frequency Offset

At address 4h: 32-bit bcd big-endian integer value (bcd8be).

Specifies the transmit frequency offset.

The frequency is stored in 10Hz. The offset direction is stored separately.

Repeater direction

At address 8h:7: Enumeration of size 0h:2, with 3 options. Specifies the offset direction for the repeater mode.

Value	Name	Description
0	Simplex	RX = TX Frequency
1	Positive	TX = RX + Offset
2	Negative	TX = RX - Offset

Bandwidth

At address 8h:5: Enumeration of size 0h:2, with 2 options. Specifies the bandwidth of the FM channel. DMR channels are always 12.5kHz wide.

Value	Name	Description
0	Narrow (12.5kHz)
1	Wide (25kHz)

Transmit power

At address 8h:3: Enumeration of size 0h:2, with 4 options. Specifies the transmit power of the channel.

Value	Name	Description
0	Low
1	Medium
2	High
3	Turbo

Channel mode

At address 8h:1: Enumeration of size 0h:2, with 4 options. Specifies the mode of the channel.

Value	Name	Description
0	FM
1	DMR
2	FM + DMR RX
3	DMR + FM RX

Enable talkaround TlkAr

At address 9h:7: boolean value. Default value 0h.

Call confirm

At address 9h:6: boolean value. Default value 0h.

Enable RX only RXO

At address 9h:5: boolean value. Default value 0h.

If enabled, no transmission is possible on this channel.

Enable CTCSS phase reversal

At address 9h:4: boolean value. Default value 0h.

Enable TX DCS

At address 9h:3: boolean value. Default value 0h.

Enable TX CTCSS

At address 9h:2: boolean value.

Enable RX DCS

At address 9h:1: boolean value. Default value 0h.

Enable RX CTCSS

At address 9h:0: boolean value. Default value 0h.

TX Tone CTCSS

At address ah: Enumeration of size 1h, with 51 options.

Value	Name	Description
0	62.5 Hz
1	67.0 Hz
2	69.3 Hz
3	71.9 Hz
4	74.4 Hz
5	77.0 Hz
6	79.7 Hz
7	82.5 Hz
8	85.4 Hz
9	88.5 Hz
10	91.5 Hz
11	94.8 Hz
12	97.4 Hz
13	100.0 Hz
14	103.5 Hz
15	107.2 Hz
16	110.9 Hz
17	114.8 Hz
18	118.8 Hz
19	123.0 Hz
20	127.3 Hz
21	131.8 Hz
22	136.5 Hz
23	141.3 Hz
24	146.2 Hz
25	151.4 Hz
26	156.7 Hz
27	159.8 Hz
28	162.2 Hz
29	165.5 Hz
30	167.9 Hz
31	171.3 Hz
32	173.8 Hz
33	177.3 Hz
34	179.9 Hz
35	183.5 Hz
36	186.2 Hz
37	189.9 Hz
38	192.8 Hz
39	196.6 Hz
40	199.5 Hz
41	203.5 Hz
42	206.5 Hz
43	210.7 Hz
44	218.1 Hz
45	225.7 Hz
46	229.1 Hz
47	233.6 Hz
48	241.8 Hz
49	250.3 Hz
50	254.1 Hz

RX Tone CTCSS

At address bh: Enumeration of size 1h, with 51 options.

Value	Name	Description
0	62.5 Hz
1	67.0 Hz
2	69.3 Hz
3	71.9 Hz
4	74.4 Hz
5	77.0 Hz
6	79.7 Hz
7	82.5 Hz
8	85.4 Hz
9	88.5 Hz
10	91.5 Hz
11	94.8 Hz
12	97.4 Hz
13	100.0 Hz
14	103.5 Hz
15	107.2 Hz
16	110.9 Hz
17	114.8 Hz
18	118.8 Hz
19	123.0 Hz
20	127.3 Hz
21	131.8 Hz
22	136.5 Hz
23	141.3 Hz
24	146.2 Hz
25	151.4 Hz
26	156.7 Hz
27	159.8 Hz
28	162.2 Hz
29	165.5 Hz
30	167.9 Hz
31	171.3 Hz
32	173.8 Hz
33	177.3 Hz
34	179.9 Hz
35	183.5 Hz
36	186.2 Hz
37	189.9 Hz
38	192.8 Hz
39	196.6 Hz
40	199.5 Hz
41	203.5 Hz
42	206.5 Hz
43	210.7 Hz
44	218.1 Hz
45	225.7 Hz
46	229.1 Hz
47	233.6 Hz
48	241.8 Hz
49	250.3 Hz
50	254.1 Hz

TX DCS code

At address ch: 16-bit unsigned little-endian integer value (uint16le). Default value 0h.

Encodes the DCS code in a complex way.

The least significant 9 bits encode the binary DCS code. The 9th bit encodes the inversion flag.

RX DCS code

At address eh: 16-bit unsigned little-endian integer value (uint16le). Default value 0h.

Encodes the DCS code in a complex way.

The least significant 9 bits encode the binary DCS code. The 9th bit encodes the inversion flag.

Custom CTCSS frequency

At address 10h: 16-bit signed little-endian integer value (int16le). Default value 0h.

Specifies a custom CTCSS frequency in 0.1Hz.

Two-tone decode index

At address 12h: 16-bit unsigned little-endian integer value (uint16le). Default value 0h.

Specifies the two-tone decode index.

Transmit contact index

At address 14h: 32-bit unsigned little-endian integer value (uint32le). Default value 0h.

Contact index, 0-based.

Radio ID index

At address 18h: 8-bit unsigned integer value (uint8). Default value 0h.

Unknown data

At address 19h: Unknown data of size 0h:6.

FM PTT ID transmission mode TX PTT ID

At address 19h:1: Enumeration of size 0h:2, with 4 options. Specifies when to transmit the FM PTT id.

Value	Name	Description
0	Off
1	Start
2	End
3	Both

Unused data

At address 1ah:7: Unused data of size 0h:2: 00

Optional Signaling

At address 1ah:5: Enumeration of size 0h:2, with 4 options.

Value	Name	Description
0	Off
1	DTMF
2	two-tone
3	five-tone

Unknown data

At address 1ah:3: Unknown data of size 0h:2.

Admit Criterium

At address 1ah:1: Enumeration of size 0h:2, with 4 options. This is a mess. Similar admid criteria for FM and DMR are encoded differently. E.g., channel free and different CC/tone.

Value	Name	Description
0	Always
1	Channel Free	DMR: channel Free, FM: different CTCSS/DCS tone.
2	Different color code	DMR: different CC; FM: channel free
3	Same color code

Scan list index

At address 1bh: 8-bit unsigned integer value (uint8). Default value 0h.

Scan list index, 0-based.

None = 0xff.

Group List index

At address 1ch: 8-bit unsigned integer value (uint8). Default value ffh.

Specifies the group list index.

A 0-based index of the group list. If not set, 0xff.

Two-tone Id

At address 1dh: 8-bit unsigned integer value (uint8).

Five-tone Id

At address 1eh: 8-bit unsigned integer value (uint8).

DTMF Id

At address 1fh: 8-bit unsigned integer value (uint8).

Colorcode

At address 20h: 8-bit unsigned integer value (uint8).

Enable Lone Worker LWk

At address 21h:7: boolean value. Default value 0h.

Unknown data

At address 21h:6: Unknown data of size 0h:1.

Enable APRS RX APRSr

At address 21h:5: boolean value.

Unknown data

At address 21h:4: Unknown data of size 0h:1.

DCMA mode

At address 21h:3: Enumeration of size 0h:2, with 3 options.

Value	Name	Description
0	Off
1	DCMA Double Slot
2	DCMA Sinlge Slot

Enable SMS Confirmation SMS ACK

At address 21h:1: boolean value. Default value 0h.

Time Slot

At address 21h:0: Enumeration of size 0h:1, with 2 options.

Value	Name	Description
0	Time Slot 1
1	Time Slot 2

AES encryption key index

At address 22h: 8-bit unsigned integer value (uint8).

Name

At address 23h: ASCII string of length (up to) 16 chars, 00h-padded.

Pad Byte

At address 33h: Unused data of size 1h: 00

Unknown data

At address 34h: Unknown data of size 0h:3.

Auto scan

At address 34h:4: boolean value. Default value 0h.

Disable data ACK dACK

At address 34h:3: boolean value.

Exclude channel from roaming

At address 34h:2: boolean value. Default value 0h.

Enable Simplex Smplx

At address 34h:1: boolean value. Default value 0h.

Enables the simplex mode.

That is, RX = TX frequency.

Enable ranging Rngng

At address 34h:0: boolean value.

APRS Type

At address 35h: Enumeration of size 1h, with 3 options.

Value	Name	Description
0	None
1	FM ARPS
2	DMR APRS

DMR APRS PTT mode

At address 36h: Enumeration of size 1h, with 3 options.

Value	Name	Description
0	Off
1	Start of transmission
2	End of transmission

FM APRS PTT mode

At address 37h: Enumeration of size 1h, with 2 options.

Value	Name	Description
0	Off
1	On

DMR APRS channel index

At address 38h: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the DMR APRS channel setting index. A value in [0,7].

Frequency correction

At address 39h: 8-bit signed integer value (int8).

Specifies the frequency correction in multiples of 10Hz.

Unknown data

At address 3ah: Unknown data of size 1h.

Unknown data

At address 3bh: Unknown data of size 0h:2.

Encryption type CrypType

At address 3bh:5: Enumeration of size 0h:1, with 2 options. Specifies the encryption type.

Value	Name	Description
0	AES
1	ARC4

Send talker alias Send TalkAl

At address 3bh:4: boolean value. Default value 0h.

Mute FM APRS

At address 3bh:3: boolean value. Default value 0h.

SMS forbid

At address 3bh:2: boolean value.

Random Key

At address 3bh:1: boolean value.

Multiple Keys

At address 3bh:0: boolean value.

FM APRS frequency index

At address 3ch: 8-bit unsigned integer value (uint8). Default value 0h.

A value in range [0,7].

ARC4 key index

At address 3dh: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the key index for ARC4 encryption.

This index is idx+1, that is 0=Off, 1=key 0, 2 = key 1, ...

Unknown data

At address 3eh: Unknown data of size 2h.

490 VFO A channel extension

Element at address fc2800h of size 40h.

Encodes additional channel information for VFO A.

5 Tone PTT ID index BOT

At address 0h: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the index of the begin-of-transmission 5 tone PTT ID to send.

5 Tone PTT ID index EOT

At address 1h: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the index of the 5 tone end-of-transmission PTT ID to send.

Unknown data

At address 2h: Unknown data of size 3eh.

491 VFO B channel extension

Element at address fc2840h of size 40h.

Encodes additional channel information for VFO B.

5 Tone PTT ID index BOT

At address 0h: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the index of the begin-of-transmission 5 tone PTT ID to send.

5 Tone PTT ID index EOT

At address 1h: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the index of the 5 tone end-of-transmission PTT ID to send.

Unknown data

At address 2h: Unknown data of size 3eh.

492 Zone channel lists. v3.04done

Between 1 and 250 repetitions of Zone channel list.

493 Zone channel list v3.04done

Element of size 200h.

493.1 Zone channel indices v3.04done

Exactly 250 repetitions of Channel index.

A fixed sized list of channel indices for the zone.

Channel index

16-bit unsigned little-endian integer value (uint16le). Default value ffffh.

Specifies the 0-based channel index.

If unset, value is ffffh.

Unused data

At address 1f4h: Unused data of size ch: ff

494 Roaming channel bank v3.04done

Up to 250 repetitions of Roaming channel.

Encodes a bank of up to 250 roaming channels.

495 Roaming channel v3.04done

Element of size 20h.

Encodes a single roaming channel.

RX frequency

At address 0h: 32-bit bcd big-endian integer value (bcd8be).

Specifies the RX frequency.

The frequency is stored in multiples of 10Hz.

TX frequency

At address 4h: 32-bit bcd big-endian integer value (bcd8be).

Encodes the transmit frequency.

The frequency is encoded in multiples of 10Hz.

Color code override

At address 8h: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the color code to override the current channels setting with.

If set to 16 (10h), there is no override.

Time slot override

At address 9h: Enumeration of size 1h, with 3 options. Specifies if and how the current channels time slot gets overridden.

Value	Name	Description
0	Time Slot 1
1	Time Slot 2
2	None	If selected, the current channels time slot will not be overridden.

Name

At address ah: ASCII string of length (up to) 16 chars, 00h-padded.

Unused data

At address 1ah: Unused data of size 6h: 00

496 Roaming channel bitmap v3.04done

Element at address 1042000h of size 20h.

496.1 Roaming channel bits v3.04done

Exactly 250 repetitions of Roaming channel bit.

Roaming channel bit

boolean value. Default value 0h.

Single bit encoding whether a roaming channel is valid.

Unused data

At address 1fh:5: Unused data of size 0h:6: 00

497 Roaming zone bitmap v3.04done

Element at address 1042080h of size 10h.

497.1 Roaming zone bits v3.04done

Exactly 64 repetitions of Roaming zone enable bit.

Roaming zone enable bit

boolean value. Default value 0h.

Enables a single roaming zone.

Unused data

At address 8h: Unused data of size 8h: 00

498 Roaming zone bank v3.04done

Up to 64 repetitions of Roaming zone.

A collection of up to 64 roaming zones.

499 Roaming zone v3.04done

Element of size 80h.

Encodes a single roaming.

499.1 Roaming channel indices v3.04done

Exactly 64 repetitions of Roaming channel index.

Roaming channel index

8-bit unsigned integer value (uint8).

Name

At address 40h: ASCII string of length (up to) 16 chars, 00h-padded. Specifies the name of the roaming zone.

Unused data

At address 50h: Unused data of size 30h: 00

500 Scan list banks v3.04done

Up to 16 repetitions of Scan list bank.

501 Scan list bank v3.04done

Between 1 and 250 repetitions of Scan List.

502 Scan List v3.04done

Element of size 90h.

Unused data

At address 0h: Unused data of size 1h:

Priority Channel

At address 1h: Enumeration of size 1h, with 4 options.

Value	Name	Description
0	Off
1	Primary
2	Secondary
3	Both

Primary Priority Channel Index

At address 2h: 16-bit unsigned little-endian integer value (uint16le). Default value ffffh.

Index +1, 0=selected. ffff=none.

Secondary Priority Channel Index

At address 4h: 16-bit unsigned little-endian integer value (uint16le). Default value ffffh.

Index +1, 0=selected, ffff=none

Primary Look Back Time

At address 6h: 16-bit unsigned little-endian integer value (uint16le).

in 10sec.

Secondary Look Back Time

At address 8h: 16-bit unsigned little-endian integer value (uint16le). Default value 0h.

in 10sec.

Dropout delay

At address ah: 16-bit unsigned little-endian integer value (uint16le).

in 10sec.

Dwell time

At address ch: 16-bit unsigned little-endian integer value (uint16le).

in 10sec.

Revert Channel Type

At address eh: Enumeration of size 1h, with 8 options.

Value	Name	Description
0	Selected Channel
1	Selected + Active Channel
2	Primary Channel
3	Secondary Channel
4	Last Called
5	Last Used
6	Primary + Active Channel
7	Secondary + Active Channel

Name

At address fh: ASCII string of length (up to) 16 chars, 00h-padded.

Pad Byte

At address 1fh: Unused data of size 1h: 00

502.1 Channel Indices v3.04done

Exactly 50 repetitions of Channel Index.

Channel Index

16-bit unsigned little-endian integer value (uint16le). Default value 0h.

Index 0-based, ffffh=disabled

Unused data

At address 84h: Unused data of size ch: 00

503 Message linked list v3.04done

Up to 100 repetitions of List element.

504 List element v3.04done

Element of size 10h.

Unused data

At address 0h: Unused data of size 2h:

Next index

At address 2h: 8-bit unsigned integer value (uint8).

Current index

At address 3h: 8-bit unsigned integer value (uint8).

Unused data

At address 4h: Unused data of size ch:

505 Message byte-map v3.04done

Element at address 1640800h of size 90h.

505.1 Message enabled bytes v3.04done

Exactly 100 repetitions of Message enable byte.

Message enable byte

Enumeration of size 1h, with 2 options. Enables a specific message.

Value	Name	Description
0	Valid
255	Invalid

Unused data

At address 64h: Unused data of size 2ch:

506 Message banks v3.04done

Up to 13 repetitions of Message bank.

507 Message bank v3.04done

Between 1 and 8 repetitions of Message.

508 Message v3.04done

Element of size 100h.

Message text

At address 0h: ASCII string of length (up to) 99 chars, 00h-padded.

Unused data

At address 63h: Unused data of size 9dh:

509 FM broadcast channel frequencies v3.04done

Up to 100 repetitions of Channel frequency.

Channel frequency

32-bit signed little-endian integer value (int32le).

510 FM broadcast VFO frequency v3.04done

Element at address 2480200h of size 10h.

VFO frequency

At address 0h: 32-bit signed little-endian integer value (int32le).

Unused data

At address 4h: Unused data of size ch:

511 FM broadcast channel bitmap v3.04done

Element at address 2480210h of size 10h.

511.1 FM broadcast channel bits v3.04done

Exactly 100 repetitions of Channel bit.

Channel bit

boolean value.

Unused data

At address ch:3: Unused data of size 3h:4:

512 FM broadcast channel scan bitmap v3.04done

Element at address 2480220h of size 10h.

512.1 FM broadcast channel scan bits v3.04done

Exactly 100 repetitions of Channel bit.

Channel bit

boolean value.

Unused data

At address ch:3: Unused data of size 3h:4:

513 5-Tone IDs v3.05done

Up to 100 repetitions of 5-tone ID.

514 5-tone ID v3.05done

Element of size 20h.

Unused data

At address 0h: Unused data of size 1h:

Standard

At address 1h: Enumeration of size 1h, with 15 options.

Value	Name	Description
0	ZVEI1
1	ZVEI2
2	ZVEI3
3	PZVEI
4	DZVEI
5	PDZVEI
6	CCIR1
7	CCIR2
8	PCCIR
9	EEA
10	Euro Signal
11	NATEL
12	MODAT
13	CCITT
14	EIA

ID length

At address 2h: 8-bit signed integer value (int8).

Tone duration

At address 3h: 8-bit signed integer value (int8). Default value 0h.

Duration is encoded in ms. Valid values are 30ms - 100ms.

514.1 ID v3.05done

Exactly 40 repetitions of Digit.

Up to 40 digits

Digit

4-bit unsigned integer value (uint4). Default value 0h.

Encodes a single ID digit.

Name

At address 18h: ASCII string of length (up to) 7 chars, 20h-padded.

Pad Byte

At address 1fh: Unused data of size 1h: 00

515 5-Tone id bitmap v3.05done

Element at address 24c0c80h of size 10h.

515.1 5-tone id bits v3.05done

Exactly 100 repetitions of 5-tone id bit.

5-tone id bit

boolean value.

Unused data

At address ch:3: Unused data of size 3h:4:

516 5-Tone functions v3.05done

Exactly 16 repetitions of 5-Tone function.

Defines up to 16 functions, that can be triggered by a 5-tone id.

517 5-Tone function v3.05done

Element of size 20h.

Configures a single function

Function code

At address 0h: Enumeration of size 1h, with 7 options.

Value	Name	Description
0	Open squelch
1	Call all
2	Emergency alarm
3	Remote kill
4	Remote stun
5	Remote restore
6	Message group

Response

At address 1h: Enumeration of size 1h, with 3 options.

Value	Name	Description
0	None
1	Tone
2	Respond

ID Length

At address 2h: 8-bit unsigned integer value (uint8). Default value 0h.

517.1 ID v3.05done

Exactly 12 repetitions of ID digit.

ID digit

8-bit unsigned integer value (uint8). Default value 0h.

Encodes a single ID digit. Valid values are 0-9, A-F. Encoded as 0-15.

Pad Byte

At address fh: Unused data of size 1h: 00

Name

At address 10h: ASCII string of length (up to) 7 chars, 00h-padded.

Unused data

At address 17h: Unused data of size 9h: 00

518 5-Tone settings v3.05done

Element at address 24c1000h of size 80h.

Unknown data

At address 0h: Unknown data of size 20h.

Unused data

At address 20h: Unused data of size 1h:

Decoing response

At address 21h: Enumeration of size 1h, with 3 options.

Value	Name	Description
0	None
1	Tone
2	Tone and respond

Decoding standard

At address 22h: Enumeration of size 1h, with 15 options.

Value	Name	Description
0	ZVEI1
1	ZVEI2
2	ZVEI3
3	PZVEI
4	DZVEI
5	PDZVEI
6	CCIR1
7	CCIR2
8	PCCIR
9	EEA
10	Euro Signal
11	NATEL
12	MODAT
13	CCITT
14	EIA

Radio ID length

At address 23h: 8-bit signed integer value (int8).

Decoding tone duration in ms

At address 24h: 8-bit signed integer value (int8).

Radio ID

At address 25h: 56-bit signed little-endian integer value (int56le).

Post encode delay in 10ms

At address 2ch: 8-bit signed integer value (int8).

PTT ID 0=off, [5,75]

At address 2dh: 8-bit signed integer value (int8).

Auto reset time in 10s

At address 2eh: 8-bit signed integer value (int8).

First delay in 10ms

At address 2fh: 8-bit signed integer value (int8).

Sidetone enable

At address 30h: Enumeration of size 1h, with 2 options.

Value	Name	Description
0
1

Unused data

At address 31h: Unused data of size 1h: 00

Stop code

At address 32h: 8-bit signed integer value (int8).

Stop time in 10ms

At address 33h: 8-bit signed integer value (int8).

Decode time in 10ms

At address 34h: 8-bit signed integer value (int8).

Delay after stop in 10ms

At address 35h: 8-bit signed integer value (int8).

Pre-time in 10ms

At address 36h: 8-bit signed integer value (int8).

Unused data

At address 37h: Unused data of size 6h:

BOT standard

At address 3dh: Enumeration of size 1h, with 15 options.

Value	Name	Description
0	ZVEI1
1	ZVEI2
2	ZVEI3
3	PZVEI
4	DZVEI
5	PDZVEI
6	CCIR1
7	CCIR2
8	PCCIR
9	EEA
10	Euro Signal
11	NATEL
12	MODAT
13	CCITT
14	EIA

BOT ID length

At address 3eh: 8-bit signed integer value (int8).

BOT tone duration in ms

At address 3fh: 8-bit signed integer value (int8).

BOT ID

At address 40h: 96-bit signed little-endian integer value (int96le).

Unused data

At address 4ch: Unused data of size 11h:

EOT standard

At address 5dh: Enumeration of size 1h, with 15 options.

Value	Name	Description
0	ZVEI1
1	ZVEI2
2	ZVEI3
3	PZVEI
4	DZVEI
5	PDZVEI
6	CCIR1
7	CCIR2
8	PCCIR
9	EEA
10	Euro Signal
11	NATEL
12	MODAT
13	CCITT
14	EIA

EOT ID length

At address 5eh: 8-bit signed integer value (int8).

EOT tone duration in ms

At address 5fh: 8-bit signed integer value (int8).

EOT ID

At address 60h: 96-bit signed little-endian integer value (int96le).

Unused data

At address 6ch: Unused data of size 14h:

519 DTMF Settings v3.05done

Element at address 24c1080h of size 50h.

Symbol Interval

At address 0h: 8-bit unsigned integer value (uint8).

Valid values 0-15.

Group Code

At address 1h: 8-bit unsigned integer value (uint8).

Valid values 0-15

Response

At address 2h: Enumeration of size 1h, with 3 options.

Value	Name	Description
0	None
1	Tone
2	Tone + Respond

Tone Delay

At address 3h: 8-bit unsigned integer value (uint8).

Tone delay in 10ms.

First digit duration

At address 4h: 8-bit unsigned integer value (uint8).

Duration in 10ms.

Auto Reset Time

At address 5h: 8-bit unsigned integer value (uint8).

In multiple of 10s.

Radio ID

At address 6h: ASCII string of length (up to) 3 chars, 00h-padded.

Post-tone delay.

At address 9h: 8-bit unsigned integer value (uint8).

Delay in multiple of 10ms before EOT.

PTT Id Pause

At address ah: 8-bit unsigned integer value (uint8).

Pause between PTT Id transmissions in multiple of 10s.

PTT Id Enable

At address bh: 8-bit unsigned integer value (uint8).

D-Code Pause

At address ch: 8-bit unsigned integer value (uint8).

In seconds.

Side-tone enable

At address dh: 8-bit unsigned integer value (uint8).

Unused data

At address eh: Unused data of size 2h: 00 00

BOT Id

At address 10h: ASCII string of length (up to) 16 chars, FFh-padded.

EOT Id

At address 20h: ASCII string of length (up to) 16 chars, FFh-padded.

Remote kill Id

At address 30h: ASCII string of length (up to) 16 chars, FFh-padded.

Remote Stun Id

At address 40h: ASCII string of length (up to) 16 chars, FFh-padded.

520 2-Tone Ids v3.05done

Up to 24 repetitions of 2-Tone Id.

521 2-Tone Id v3.05done

Element of size 10h.

Encodes a single 2-tone id.

First tone frequency

At address 0h: 16-bit unsigned little-endian integer value (uint16le). Default value 0h.

Encodes the frequency in multiples of 0.1Hz.

Second tone frequency

At address 2h: 16-bit unsigned little-endian integer value (uint16le). Default value 0h.

Encodes the tone frequency in multiples of 0.1Hz.

Unused data

At address 4h: Unused data of size 4h: 00

Name

At address 8h: ASCII string of length (up to) 7 chars, 00h-padded. The name of the id.

Pad byte

At address fh: Unused data of size 1h: 00

522 2-Tone Id bitmap v3.05done

Element at address 24c1280h of size 10h.

Specifies, which 2-tone id is valid.

522.1 2-tone id enable bits v3.05done

Exactly 24 repetitions of 2-tone id enable bit.

2-tone id enable bit

boolean value. Default value 0h.

Unused data

At address 3h: Unused data of size dh: 00

523 2-Tone Settings

Element at address 24c1290h of size 10h.

Unknown data

At address 0h: Unknown data of size 9h.

First tone duration

At address 9h: 8-bit unsigned integer value (uint8).

Encodes the first tone duration in multiples of 100ms. Valid values are 500-10000ms.

Second tone duration

At address ah: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the second tone duration in multiples of 100ms. Valid values are 500ms - 10000ms.

Long tone duration

At address bh: 8-bit unsigned integer value (uint8). Default value 0h.

Encodes the duration in terms of 100ms. Valid values are 500 - 10000ms.

Gap duration

At address ch: 8-bit unsigned integer value (uint8). Default value 0h.

Encodes the gap duration in multiples of 100ms. Valid values are 0 - 2000ms.

Reset period

At address dh: 8-bit unsigned integer value (uint8). Default value 0h.

Encodes the reset period in seconds. Valid values are 0 - 250s.

Side tone

At address eh: Enumeration of size 1h, with 2 options. Enables side tone.

Value	Name	Description
0	Off
1	On

Unknown data

At address fh: Unknown data of size 1h.

524 Zone Bitmap Element v3.04done

Element at address 24c1300h of size 20h.

524.1 Zone bitmap v3.04done

Exactly 250 repetitions of Zone enable bit.

Zone enable bit

boolean value. Default value 0h.

Unused data

At address 1fh:5: Unused data of size 0h:6: 00

525 Radio Id Bitmap Element v3.04done

Element at address 24c1320h of size 20h.

525.1 Radio Id Bitmap v3.04done

Exactly 250 repetitions of Radio Id Enable Bit.

Radio Id Enable Bit

boolean value. Default value 0h.

Unused data

At address 1fh:5: Unused data of size 0h:6:

526 Scan List Bitmap Element v3.04done

Element at address 24c1340h of size 20h.

526.1 Scan List Bitmap v3.04done

Exactly 250 repetitions of Scan List Enable Bit.

Scan List Enable Bit

boolean value.

Unused data

At address 1fh:5: Unused data of size 0h:6: 00

527 Hidden zone bitmap v3.05done

Element at address 24c1360h of size 20h.

527.1 Hidden zone bits v3.05done

Exactly 250 repetitions of Hidden zone bit.

Hidden zone bit

boolean value. Default value 0h.

If enabled, the corresponding zone is hidden.

Unused data

At address 1fh:5: Unused data of size 0h:6: 00

528 Alarm Settings v3.05done

Element at address 24c1400h of size 20h.

528.1 Analog Alarm Settings v3.05done

Element at address 0h of size ah.

Action

At address 0h: Enumeration of size 1h, with 4 options.

Value	Name	Description
0	None
1	TX and background
2	TX and non-local alarm
3	TX and local alarm

Mode

At address 1h: Enumeration of size 1h, with 3 options.

Value	Name	Description
0	None
1	DTMF
2	5-Tone

DTMF/5Tomn id index

At address 2h: 8-bit unsigned integer value (uint8). Default value 0h.

0-based index of DTMF or 5-tone id.

Alarm duration

At address 3h: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the alarm duration in seconds.

Alarm TX duration

At address 4h: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the alarm transmit duration in seconds.

Alarm RX duration

At address 5h: 8-bit unsigned integer value (uint8).

Specifies the alarm RX duration in seconds.

Alarm channel index

At address 6h: 16-bit unsigned little-endian integer value (uint16le). Default value 0h.

Must be a 0-based index to an analog channel.

Alarm channel selection

At address 8h: Enumeration of size 1h, with 2 options.

Value	Name	Description
0	Current Channel
1	Set Channel

Emergency cycle

At address 9h: 8-bit unsigned integer value (uint8). Default value 0h.

0 = continuous, otherwise count 1...255.

528.2 DMR Alarm Settings v3.05done

Element at address ah of size 8h.

Action

At address 0h: Enumeration of size 1h, with 4 options.

Value	Name	Description
0	None
1	TX and background
2	TX and non-local alarm
3	TX and local alarm

Alarm duration

At address 1h: 8-bit unsigned integer value (uint8). Default value 14h.

Specifies the alarm duration in seconds.

Alarm TX duration

At address 2h: 8-bit unsigned integer value (uint8). Default value 1fh.

Specifies the TX duration in seconds.

Alarm RX duration

At address 3h: 8-bit unsigned integer value (uint8). Default value 1fh.

Specifies the alarm RX duration in seconds.

Alarm channel index

At address 4h: 16-bit unsigned little-endian integer value (uint16le). Default value 0h.

Specifies the index the alarm channel. Must be an index of a DMR channel.

Alarm channel selection

At address 6h: Enumeration of size 1h, with 2 options.

Value	Name	Description
0	Channe index
1	Current channel

Emergency cycle

At address 7h: 8-bit unsigned integer value (uint8).

0=Continous, else number of cycles.

528.3 Lone Worker Settings v3.05done

Element at address 12h of size 4h.

Voice switch broadcast

At address 0h: 8-bit unsigned integer value (uint8). Default value 0h.

Some bull shit. Likely a period in minutes+1. Of regular transmissions. That is 0=1m, 1=2m,...

Area switch broadcast

At address 1h: 8-bit unsigned integer value (uint8). Default value 0h.

Uh, the engineerd absolutely gave a shit. This is some other time interval. This time in seconds+1. That is, 0=1s, 1=2s, ...

Mic switch broadcast

At address 2h: Enumeration of size 1h, with 2 options.

Value	Name	Description
0	Key
1	Voice transmission

Receive alarm

At address 3h: Enumeration of size 1h, with 2 options.

Value	Name	Description
0	Off
1	On

Unused data

At address 16h: Unused data of size ah: 00

529 DMR Alarm Extension v3.05done

Element at address 24c1440h of size 30h.

Call Type

At address 0h: Enumeration of size 1h, with 3 options.

Value	Name	Description
0	Private Call
1	Group Call
2	All Call

Unused data

At address 1h: Unused data of size 22h:

Destination Id

At address 23h: 32-bit bcd big-endian integer value (bcd8be).

Unused data

At address 27h: Unused data of size 9h: 00

530 Channel Bitmap Element v3.04done

Element at address 24c1500h of size 200h.

530.1 Channel enable bits v3.04done

Exactly 4000 repetitions of Channel enable bit.

Channel enable bit

boolean value.

Unused data

At address 1f4h: Unused data of size ch:

531 DMR Encryption IDs v3.04done

Exactly 32 repetitions of DMR Encryption Id.

DMR Encryption Id

16-bit unsigned big-endian integer value (uint16be).

532 DMR Encryption Keys v3.04done

Exactly 32 repetitions of DMR Encryption Key.

533 DMR Encryption Key v3.04done

Element of size 28h.

Unused data

At address 0h: Unused data of size 10h: 00

Key

At address 10h: 16-bit signed big-endian integer value (int16be). Default value ffffh.

Unused data

At address 12h: Unused data of size 16h: 00

534 Auto repeater offset frequency bank v3.04done

Element at address 24c2000h of size 3f0h.

Holds up to 250 offset frequencies for the auto-repeater feature.

534.1 Auto repeater offset frequencies v3.04done

Exactly 250 repetitions of Offset frequency.

The actual list of exactly 250 offset frequencies.

Offset frequency

32-bit signed little-endian integer value (int32le). Default value 0h.

Encodes the absolute value of the offset frequency.

The frequency is encoded as multiples of 10Hz. If 0=disabled.

Unused data

At address 3e8h: Unused data of size 8h: 00

535 2-Tone functions v3.05done

Up to 16 repetitions of Two-Tone function.

Encodes up to 16 two-tone functions.

536 Two-Tone function v3.05done

Element of size 20h.

First tone frequency

At address 0h: 16-bit unsigned little-endian integer value (uint16le). Default value 0h.

Encodes the frequency of the first tone.

The value is stored in multiples of 0.1Hz.

Second tone frequency

At address 2h: 16-bit unsigned little-endian integer value (uint16le). Default value 0h.

Encodes the frequency of the second tone.

The value is stored in multiples of 0.1Hz.

Response

At address 4h: Enumeration of size 1h, with 3 options.

Value	Name	Description
0	None
1	Tone
2	Respond

Function name

At address 5h: ASCII string of length (up to) 7 chars, 00h-padded.

Unused data

At address ch: Unused data of size 14h: 00

537 2-Tone function bitmap v3.05done

Element at address 24c2600h of size 10h.

537.1 2-Tone function bits v3.05done

Exactly 16 repetitions of 2-Tone function bit.

2-Tone function bit

boolean value. Default value 0h.

Unused data

At address 2h: Unused data of size eh: 00

538 AES encryption key bank v4.00done

Element at address 24c4000h of size 4000h.

538.1 AES encryption keys v4.00done

Exactly 255 repetitions of AES encryption key.

538.2 AES encryption key v4.00done

Element of size 40h.

Key Id

At address 0h: 8-bit unsigned integer value (uint8). Default value 0h.

1-based key Id. 0=Off.

Key Data

At address 1h: 256-bit unsigned big-endian integer value (uint256be). Default value 0h.

Up to 256 bit AES key. The key is right aligned. You may consider it as a big-endian integer.

Unused data

At address 21h: Unused data of size 1h: 00

Key size

At address 22h: 8-bit unsigned integer value (uint8). Valid values between 20h and 40h, with default value 40h.

Specifies the key size in multiples of 4bit.

Unused data

At address 23h: Unused data of size 1dh: 00

Unused data

At address 3fc0h: Unused data of size 40h: 00

539 AES encryption key bitmap

Element at address 24c8000h of size 20h.

539.1 AES key enable bits

Exactly 255 repetitions of Key enable bit.

Key enable bit

boolean value. Default value 0h.

Unused data

At address 1fh:0: Unused data of size 0h:1: 00

540 General Settings v4.00done

Element at address 2500000h of size f0h.

Enable key tone

At address 0h: 8-bit unsigned integer value (uint8). Default value 0h.

Display Mode

At address 1h: Enumeration of size 1h, with 2 options. Speficies the channel display mode. That is name or frequency.

Value	Name	Description
0	Channel
1	Frequency

Enable automatic key lock

At address 2h: 8-bit unsigned integer value (uint8).

Auto-shutoff delay

At address 3h: Enumeration of size 1h, with 5 options. Specifies the time period afer wich the radio shuts off.

Value	Name	Description
0	Off
1	10 min
2	30 min
3	60 min
4	120 min

Transmit Timeout TOT

At address 4h: 8-bit unsigned integer value (uint8).

Specifies the transmit time out in multiples of 30s.

Valid values are Off (0), 30s, ..., 240s.

Language

At address 5h: Enumeration of size 1h, with 2 options.

Value	Name	Description
0	English
1	German

Boot Display

At address 6h: Enumeration of size 1h, with 3 options.

Value	Name	Description
0	Default
1	Custom Text
2	Custom Image

Enable Boot Password

At address 7h: 8-bit unsigned integer value (uint8).

Frequency step size

At address 8h: Enumeration of size 1h, with 10 options. Specifies the frequency step size.

Value	Name	Description
0	2.5 kHz
1	5 kHz
2	6.25 kHz
3	8.33 kHz
4	10 kHz
5	12.5 kHz
6	20 kHz
7	25 kHz
8	30 kHz
9	50 kHz

Squelch Level VFO A

At address 9h: 8-bit unsigned integer value (uint8). Default value 1h.

Specifies the squelch level for VFO A.

Valid values are Off, 1, ..., 5, where 0=Off.

Squelch Level VFO B

At address ah: 8-bit unsigned integer value (uint8). Default value 1h.

Valid values are Off, 1, ..., 5, where 0=Off.

Power save mode

At address bh: Enumeration of size 1h, with 3 options.

Value	Name	Description
0	Off
1	1:1 (50%)
2	1:2 (66%)

VOX sensitivity

At address ch: Enumeration of size 1h, with 4 options. Enables and sets the VOX sensitivity.

Value	Name	Description
0	Off
1	1
2	2
3	3

VOX Delay

At address dh: 8-bit unsigned integer value (uint8).

Delay expressed in 500ms + 100ms * n. Valid ranges are 0.5, ..., 3.0s.

VFO Scan Type

At address eh: Enumeration of size 1h, with 3 options. Specifies if and when a scan continues.

Value	Name	Description
0	Fixed Time	Continues after a fixed time period.
1	Carrier	Continues once the carrier is gone.
2	Stop	Stops the scan after the first signal is recieved.

DMR mic gain

At address fh: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the DMR microphone gain.

Valid values are [1, ..., 5], encoded as n + 1. That is, 0=1, ..., 4=5.

PF1 Short Press Function

At address 10h: Enumeration of size 1h, with 56 options.

Value	Name	Description
0	Off
1	Voltage
2	Power
3	Talk Around
4	Reverse
5	DMR Encryption
6	Call
7	VOX
8	VFO/Channel
9	Sub Channel PTT
10	Scan
11	FM Broadcast
12	Alarm
13	Record Switch
14	Record
15	SMS
16	Dial
17	GPS Information
18	Monitor
19	Main Channel Toggle
20	Hot Key 1
21	Hot Key 2
22	Hot Key 3
23	Hot Key 4
24	Hot Key 5
25	Hot Key 6
26	Work Alone
27	Nuisance Delete
28	DMR Monitor
29	Sub Channel Toggle
30	Priority Zone
31	VFO Scan
32	Mic Sound Quality
33	Last Call Reply
34	Channel Type Switch
35	Ranging
36	Roaming
37	Channel Ranging
38	MaxVolume
39	Slot Switch
40	APRS Type Switch
41	Zone Select
42	Set Timed Roaming
43	APRS Settings
44	Mute timing
45	CTCSS/DCS Settings
47	Bluetooth
48	GPS
49	Channel Name
50	CDT Scan
51	APRS Scan
52	FM APRS Info
53	GPS Roaming
54	Dim Shut
55	Satellite Predicting
56	FM Squelch

PF2 Short Press Function

At address 11h: Enumeration of size 1h, with 56 options.

Value	Name	Description
0	Off
1	Voltage
2	Power
3	Talk Around
4	Reverse
5	DMR Encryption
6	Call
7	VOX
8	VFO/Channel
9	Sub Channel PTT
10	Scan
11	FM Broadcast
12	Alarm
13	Record Switch
14	Record
15	SMS
16	Dial
17	GPS Information
18	Monitor
19	Main Channel Toggle
20	Hot Key 1
21	Hot Key 2
22	Hot Key 3
23	Hot Key 4
24	Hot Key 5
25	Hot Key 6
26	Work Alone
27	Nuisance Delete
28	DMR Monitor
29	Sub Channel Toggle
30	Priority Zone
31	VFO Scan
32	Mic Sound Quality
33	Last Call Reply
34	Channel Type Switch
35	Ranging
36	Roaming
37	Channel Ranging
38	MaxVolume
39	Slot Switch
40	APRS Type Switch
41	Zone Select
42	Set Timed Roaming
43	APRS Settings
44	Mute timing
45	CTCSS/DCS Settings
47	Bluetooth
48	GPS
49	Channel Name
50	CDT Scan
51	APRS Scan
52	FM APRS Info
53	GPS Roaming
54	Dim Shut
55	Satellite Predicting
56	FM Squelch

PF3 Short Press Function

At address 12h: Enumeration of size 1h, with 56 options.

Value	Name	Description
0	Off
1	Voltage
2	Power
3	Talk Around
4	Reverse
5	DMR Encryption
6	Call
7	VOX
8	VFO/Channel
9	Sub Channel PTT
10	Scan
11	FM Broadcast
12	Alarm
13	Record Switch
14	Record
15	SMS
16	Dial
17	GPS Information
18	Monitor
19	Main Channel Toggle
20	Hot Key 1
21	Hot Key 2
22	Hot Key 3
23	Hot Key 4
24	Hot Key 5
25	Hot Key 6
26	Work Alone
27	Nuisance Delete
28	DMR Monitor
29	Sub Channel Toggle
30	Priority Zone
31	VFO Scan
32	Mic Sound Quality
33	Last Call Reply
34	Channel Type Switch
35	Ranging
36	Roaming
37	Channel Ranging
38	MaxVolume
39	Slot Switch
40	APRS Type Switch
41	Zone Select
42	Set Timed Roaming
43	APRS Settings
44	Mute timing
45	CTCSS/DCS Settings
47	Bluetooth
48	GPS
49	Channel Name
50	CDT Scan
51	APRS Scan
52	FM APRS Info
53	GPS Roaming
54	Dim Shut
55	Satellite Predicting
56	FM Squelch

P1 Short Press Function

At address 13h: Enumeration of size 1h, with 56 options.

Value	Name	Description
0	Off
1	Voltage
2	Power
3	Talk Around
4	Reverse
5	DMR Encryption
6	Call
7	VOX
8	VFO/Channel
9	Sub Channel PTT
10	Scan
11	FM Broadcast
12	Alarm
13	Record Switch
14	Record
15	SMS
16	Dial
17	GPS Information
18	Monitor
19	Main Channel Toggle
20	Hot Key 1
21	Hot Key 2
22	Hot Key 3
23	Hot Key 4
24	Hot Key 5
25	Hot Key 6
26	Work Alone
27	Nuisance Delete
28	DMR Monitor
29	Sub Channel Toggle
30	Priority Zone
31	VFO Scan
32	Mic Sound Quality
33	Last Call Reply
34	Channel Type Switch
35	Ranging
36	Roaming
37	Channel Ranging
38	MaxVolume
39	Slot Switch
40	APRS Type Switch
41	Zone Select
42	Set Timed Roaming
43	APRS Settings
44	Mute timing
45	CTCSS/DCS Settings
47	Bluetooth
48	GPS
49	Channel Name
50	CDT Scan
51	APRS Scan
52	FM APRS Info
53	GPS Roaming
54	Dim Shut
55	Satellite Predicting
56	FM Squelch

P2 Short Press Function

At address 14h: Enumeration of size 1h, with 56 options.

Value	Name	Description
0	Off
1	Voltage
2	Power
3	Talk Around
4	Reverse
5	DMR Encryption
6	Call
7	VOX
8	VFO/Channel
9	Sub Channel PTT
10	Scan
11	FM Broadcast
12	Alarm
13	Record Switch
14	Record
15	SMS
16	Dial
17	GPS Information
18	Monitor
19	Main Channel Toggle
20	Hot Key 1
21	Hot Key 2
22	Hot Key 3
23	Hot Key 4
24	Hot Key 5
25	Hot Key 6
26	Work Alone
27	Nuisance Delete
28	DMR Monitor
29	Sub Channel Toggle
30	Priority Zone
31	VFO Scan
32	Mic Sound Quality
33	Last Call Reply
34	Channel Type Switch
35	Ranging
36	Roaming
37	Channel Ranging
38	MaxVolume
39	Slot Switch
40	APRS Type Switch
41	Zone Select
42	Set Timed Roaming
43	APRS Settings
44	Mute timing
45	CTCSS/DCS Settings
47	Bluetooth
48	GPS
49	Channel Name
50	CDT Scan
51	APRS Scan
52	FM APRS Info
53	GPS Roaming
54	Dim Shut
55	Satellite Predicting
56	FM Squelch

Work Mode A

At address 15h: Enumeration of size 1h, with 2 options.

Value	Name	Description
0	Channel
1	VFO

Work Mode B

At address 16h: Enumeration of size 1h, with 2 options.

Value	Name	Description
0	Channel
1	VFO

STE type

At address 17h: Enumeration of size 1h, with 5 options. Specifies the squelch tail elemination type.

Value	Name	Description
0	Off
1	Silent
2	120 deg
3	180 deg
4	240 deg

STE Frequency

At address 18h: Enumeration of size 1h, with 3 options. Squelch tail elemination frequency.

Value	Name	Description
0	Off
1	55.2 Hz
2	259.2 Hz

Group call hang time

At address 19h: 8-bit unsigned integer value (uint8).

Specifies hang time in seconds. That is. 0=1s, ..., 29=30s, 30=30min, 31=infinite.

Private call hang time

At address 1ah: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies hang time in seconds. That is. 0=1s, ..., 29=30s, 30=30min, 31=infinite.

Unknown data

At address 1bh: Unknown data of size 1h.

Preamble duration

At address 1ch: 8-bit unsigned integer value (uint8). Default value 5h.

Specifies the preamble duration in multiples of 60ms.

That is 0 = 0ms, ..., 40 = 2400ms.

FM broadcast channel index

At address 1dh: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the pre-set FM broadcast channel.

FM broadcast mode

At address 1eh: Enumeration of size 1h, with 2 options.

Value	Name	Description
0	Channel
1	VFO

Boot Zone A

At address 1fh: 8-bit unsigned integer value (uint8).

When work mode for VFO A is set to Channel, this index specifies the zone. 0-based zone index.

Boot Zone B

At address 20h: 8-bit unsigned integer value (uint8).

When work mode for VFO B is set to Channel, this index specifies the zone. 0-based zone index.

Unknown data

At address 21h: Unknown data of size 1h.

Enable Recording

At address 22h: 8-bit unsigned integer value (uint8).

Unknown data

At address 23h: Unknown data of size 3h.

Display Brightness

At address 26h: 8-bit unsigned integer value (uint8). Default value 0h.

Possible values [0-4].

Backlight duration

At address 27h: Enumeration of size 1h, with 16 options. Specifies the time, the backlight stays on after every event. E.g, button press or call.

Value	Name	Description
0	Infinite
1	5s
2	10s
3	15s
4	20s
5	25s
6	30s
7	1min
8	2min
9	3min
10	4min
11	5min
12	15min
13	30min
14	45min
15	1h

Enable GPS

At address 28h: 8-bit unsigned integer value (uint8). Default value 0h.

Enable SMS Alert

At address 29h: 8-bit unsigned integer value (uint8).

Unknown data

At address 2ah: Unknown data of size 1h.

Enable FM broadcast monitor

At address 2bh: 8-bit unsigned integer value (uint8). Default value 0h.

If set to 1, radio calls are received while listening to the FM broadcast.

Main VFO

At address 2ch: Enumeration of size 1h, with 2 options. Specifies, which VFO is the main one.

Value	Name	Description
0	A
1	B

Enable Subchannel

At address 2dh: 8-bit unsigned integer value (uint8). Default value 0h.

TBST

At address 2eh: Enumeration of size 1h, with 4 options.

Value	Name	Description
0	1000 Hz
1	1450 Hz
2	1750 Hz
3	2100 Hz

Enable Call Alert

At address 2fh: 8-bit unsigned integer value (uint8).

Time Zone

At address 30h: 8-bit unsigned integer value (uint8). Valid values between 0h and 32h, with default value 0h.

Specifies the time zone as an offset in multiples of 30min.

Starting at UTC-12:00. That is, 0=UTC-12:00, 1=UTC-11:30, ..., 24=UTC, ..., 50=UTC+13:00

Talk permit tone

At address 31h: Enumeration of size 1h, with 4 options.

Value	Name	Description
0	None
1	DMR
2	FM
3	Both

Enable DMR call reset tone

At address 32h: 8-bit unsigned integer value (uint8).

VOX Source

At address 33h: Enumeration of size 1h, with 3 options.

Value	Name	Description
0	Internal
1	External
2	Both

UI Mode

At address 34h: Enumeration of size 1h, with 2 options. Specifies the freedom in the UI. That is, in amateur mode, you can set a lot of stuff using the radio itself. In professional mode, you are basically locked in.

Value	Name	Description
0	Amateur
1	Professional

Unknown data

At address 35h: Unknown data of size 1h.

DMR channel free tone

At address 36h: Enumeration of size 1h, with 4 options. Selects the channel free/idle tone.

Value	Name	Description
0	Off
1	Type 1
2	Type 2
3	Type 3

Menu exit time

At address 37h: 8-bit unsigned integer value (uint8). Default value 5h.

Specifies the menu hang time/duartion.

The duration is specified in multiples of 5s + 5s. That is, 0=5s, 1=10s, 2=15s, ..., 11=60s.

Enable filter own Id

At address 38h: 8-bit unsigned integer value (uint8). Default value 0h.

Filters own ID from list of missed calls.

Enable Startup Tone

At address 39h: 8-bit unsigned integer value (uint8). Default value 0h.

Unknown data

At address 3ah: Unknown data of size 1h.

Max speaker volume

At address 3bh: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the maximum speaker volume.

Valid values are [Indoors, 1, ..., 8]. Where Indoors is encoded as 0.

kill

At address 3ch: 8-bit unsigned integer value (uint8). Default value 0h.

Unknown data

At address 3dh: Unknown data of size 1h.

Enable remote monitor

At address 3eh: 8-bit unsigned integer value (uint8). Default value 0h.

Enable RX DMR APRS Positions

At address 3fh: 8-bit unsigned integer value (uint8).

Unknown data

At address 40h: Unknown data of size 1h.

PF1 Long Press Function

At address 41h: Enumeration of size 1h, with 56 options.

Value	Name	Description
0	Off
1	Voltage
2	Power
3	Talk Around
4	Reverse
5	DMR Encryption
6	Call
7	VOX
8	VFO/Channel
9	Sub Channel PTT
10	Scan
11	FM Broadcast
12	Alarm
13	Record Switch
14	Record
15	SMS
16	Dial
17	GPS Information
18	Monitor
19	Main Channel Toggle
20	Hot Key 1
21	Hot Key 2
22	Hot Key 3
23	Hot Key 4
24	Hot Key 5
25	Hot Key 6
26	Work Alone
27	Nuisance Delete
28	DMR Monitor
29	Sub Channel Toggle
30	Priority Zone
31	VFO Scan
32	Mic Sound Quality
33	Last Call Reply
34	Channel Type Switch
35	Ranging
36	Roaming
37	Channel Ranging
38	MaxVolume
39	Slot Switch
40	APRS Type Switch
41	Zone Select
42	Set Timed Roaming
43	APRS Settings
44	Mute timing
45	CTCSS/DCS Settings
47	Bluetooth
48	GPS
49	Channel Name
50	CDT Scan
51	APRS Scan
52	FM APRS Info
53	GPS Roaming
54	Dim Shut
55	Satellite Predicting
56	FM Squelch

PF2 Long Press Function

At address 42h: Enumeration of size 1h, with 56 options.

Value	Name	Description
0	Off
1	Voltage
2	Power
3	Talk Around
4	Reverse
5	DMR Encryption
6	Call
7	VOX
8	VFO/Channel
9	Sub Channel PTT
10	Scan
11	FM Broadcast
12	Alarm
13	Record Switch
14	Record
15	SMS
16	Dial
17	GPS Information
18	Monitor
19	Main Channel Toggle
20	Hot Key 1
21	Hot Key 2
22	Hot Key 3
23	Hot Key 4
24	Hot Key 5
25	Hot Key 6
26	Work Alone
27	Nuisance Delete
28	DMR Monitor
29	Sub Channel Toggle
30	Priority Zone
31	VFO Scan
32	Mic Sound Quality
33	Last Call Reply
34	Channel Type Switch
35	Ranging
36	Roaming
37	Channel Ranging
38	MaxVolume
39	Slot Switch
40	APRS Type Switch
41	Zone Select
42	Set Timed Roaming
43	APRS Settings
44	Mute timing
45	CTCSS/DCS Settings
47	Bluetooth
48	GPS
49	Channel Name
50	CDT Scan
51	APRS Scan
52	FM APRS Info
53	GPS Roaming
54	Dim Shut
55	Satellite Predicting
56	FM Squelch

PF3 Long Press Function

At address 43h: Enumeration of size 1h, with 56 options.

Value	Name	Description
0	Off
1	Voltage
2	Power
3	Talk Around
4	Reverse
5	DMR Encryption
6	Call
7	VOX
8	VFO/Channel
9	Sub Channel PTT
10	Scan
11	FM Broadcast
12	Alarm
13	Record Switch
14	Record
15	SMS
16	Dial
17	GPS Information
18	Monitor
19	Main Channel Toggle
20	Hot Key 1
21	Hot Key 2
22	Hot Key 3
23	Hot Key 4
24	Hot Key 5
25	Hot Key 6
26	Work Alone
27	Nuisance Delete
28	DMR Monitor
29	Sub Channel Toggle
30	Priority Zone
31	VFO Scan
32	Mic Sound Quality
33	Last Call Reply
34	Channel Type Switch
35	Ranging
36	Roaming
37	Channel Ranging
38	MaxVolume
39	Slot Switch
40	APRS Type Switch
41	Zone Select
42	Set Timed Roaming
43	APRS Settings
44	Mute timing
45	CTCSS/DCS Settings
47	Bluetooth
48	GPS
49	Channel Name
50	CDT Scan
51	APRS Scan
52	FM APRS Info
53	GPS Roaming
54	Dim Shut
55	Satellite Predicting
56	FM Squelch

P1 Long Press Function

At address 44h: Enumeration of size 1h, with 56 options.

Value	Name	Description
0	Off
1	Voltage
2	Power
3	Talk Around
4	Reverse
5	DMR Encryption
6	Call
7	VOX
8	VFO/Channel
9	Sub Channel PTT
10	Scan
11	FM Broadcast
12	Alarm
13	Record Switch
14	Record
15	SMS
16	Dial
17	GPS Information
18	Monitor
19	Main Channel Toggle
20	Hot Key 1
21	Hot Key 2
22	Hot Key 3
23	Hot Key 4
24	Hot Key 5
25	Hot Key 6
26	Work Alone
27	Nuisance Delete
28	DMR Monitor
29	Sub Channel Toggle
30	Priority Zone
31	VFO Scan
32	Mic Sound Quality
33	Last Call Reply
34	Channel Type Switch
35	Ranging
36	Roaming
37	Channel Ranging
38	MaxVolume
39	Slot Switch
40	APRS Type Switch
41	Zone Select
42	Set Timed Roaming
43	APRS Settings
44	Mute timing
45	CTCSS/DCS Settings
47	Bluetooth
48	GPS
49	Channel Name
50	CDT Scan
51	APRS Scan
52	FM APRS Info
53	GPS Roaming
54	Dim Shut
55	Satellite Predicting
56	FM Squelch

P2 Long Press Function

At address 45h: Enumeration of size 1h, with 56 options.

Value	Name	Description
0	Off
1	Voltage
2	Power
3	Talk Around
4	Reverse
5	DMR Encryption
6	Call
7	VOX
8	VFO/Channel
9	Sub Channel PTT
10	Scan
11	FM Broadcast
12	Alarm
13	Record Switch
14	Record
15	SMS
16	Dial
17	GPS Information
18	Monitor
19	Main Channel Toggle
20	Hot Key 1
21	Hot Key 2
22	Hot Key 3
23	Hot Key 4
24	Hot Key 5
25	Hot Key 6
26	Work Alone
27	Nuisance Delete
28	DMR Monitor
29	Sub Channel Toggle
30	Priority Zone
31	VFO Scan
32	Mic Sound Quality
33	Last Call Reply
34	Channel Type Switch
35	Ranging
36	Roaming
37	Channel Ranging
38	MaxVolume
39	Slot Switch
40	APRS Type Switch
41	Zone Select
42	Set Timed Roaming
43	APRS Settings
44	Mute timing
45	CTCSS/DCS Settings
47	Bluetooth
48	GPS
49	Channel Name
50	CDT Scan
51	APRS Scan
52	FM APRS Info
53	GPS Roaming
54	Dim Shut
55	Satellite Predicting
56	FM Squelch

Long Press Duration

At address 46h: 8-bit unsigned integer value (uint8).

Specifies the long-press duration in seconds.

That is t = 1s + 1s * n. Valid values are 1s, ..., 5s.

Show volume bar

At address 47h: 8-bit unsigned integer value (uint8). Default value 0h.

Shows the volume bar, when the volume is changed.

Auto-repeater A direction

At address 48h: Enumeration of size 1h, with 3 options.

Value	Name	Description
0	Off
1	Positive
2	Negative

DMR monitor mode

At address 49h: Enumeration of size 1h, with 3 options.

Value	Name	Description
0	Off
1	Single slot
2	Double slot

DMR monitor match CC

At address 4ah: Enumeration of size 1h, with 2 options.

Value	Name	Description
0	Any
1	Same

DMR monitor match id

At address 4bh: Enumeration of size 1h, with 2 options.

Value	Name	Description
0	Any
1	Same

Enable DMR monitor slot hold

At address 4ch: 8-bit unsigned integer value (uint8). Default value 0h.

Show last caller

At address 4dh: Enumeration of size 1h, with 4 options. Specifies if and how the last caller is shown.

Value	Name	Description
0	Off
1	DMR ID
2	Callsign
3	Both

Unused data

At address 4eh: Unknown data of size 1h.

Unknown data

At address 4fh: Unknown data of size 1h.

FM Call hold time

At address 50h: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the hold time in seconds. Valid values are 0s, ..., 30s.

Show Clock

At address 51h: 8-bit unsigned integer value (uint8).

Max head-phone volume

At address 52h: 8-bit unsigned integer value (uint8). Default value 0h.

Encodes the maximum head-phone volume.

Valid values are [Indoors, 1, ..., 8]. Where Indoors is encoded as 0.

Sent (DMR) APRS message.

At address 53h: 8-bit unsigned integer value (uint8). Default value 0h.

Unknown data

At address 54h: Unknown data of size 3h.

Enable enhanced audio

At address 57h: 8-bit unsigned integer value (uint8). Default value 0h.

VFO Scan UHF min Frequency

At address 58h: 32-bit unsigned little-endian integer value (uint32le).

in 10Hz.

VFO Scan UHF max Frequency

At address 5ch: 32-bit unsigned little-endian integer value (uint32le).

in 10Hz

VFO Scan VHF min Frequency

At address 60h: 32-bit unsigned little-endian integer value (uint32le).

in 10Hz

VFO Scan VHF max Frequency

At address 64h: 32-bit unsigned little-endian integer value (uint32le).

in 10Hz.

UHF Auto-repeater offset frequency 1 index

At address 68h: 8-bit unsigned integer value (uint8). Default value ffh.

The 0-based index of the offset frequency.

If set to ffh, disabled.

VHF Auto-repeater 1 offset frequency index.

At address 69h: 8-bit unsigned integer value (uint8). Default value ffh.

Specifies the 0-based index of the offset frequency.

If set to ffh, disables the auto-repeater feature.

Unknown data

At address 6ah: Unknown data of size 4h.

Enable answer sub channel

At address 6eh: 8-bit unsigned integer value (uint8). Default value 0h.

If enabled, a sub-channel call can be answered when pressing PTT within 5s.

Priority zone index A

At address 6fh: 8-bit unsigned integer value (uint8). Default value ffh.

Specifies the zone 0-based index for the priority zone of VFO A. If none is set, set to ffh.

Priority zone index B

At address 70h: 8-bit unsigned integer value (uint8). Default value ffh.

Specifies the zone 0-based index for the priority zone of VFO B. If none is set, set to ffh.

Unknown data

At address 71h: Unknown data of size 1h.

540.1 Call Melody v3.05done

Element at address 72h of size 14h.

540.1.1 Tones v3.05done

Exactly 5 repetitions of Frequency.

Frequency

16-bit unsigned little-endian integer value (uint16le).

in Hz.

540.1.2 Durations v3.05done

Exactly 5 repetitions of Duration.

Duration

16-bit unsigned little-endian integer value (uint16le).

in ms.

540.2 Idle Melody v3.05done

Element at address 86h of size 14h.

540.2.1 Tones v3.05done

Exactly 5 repetitions of Frequency.

Frequency

16-bit unsigned little-endian integer value (uint16le).

in Hz.

540.2.2 Durations v3.05done

Exactly 5 repetitions of Duration.

Duration

16-bit unsigned little-endian integer value (uint16le).

in ms.

540.3 Reset Melody v3.05done

Element at address 9ah of size 14h.

540.3.1 Tones v3.05done

Exactly 5 repetitions of Frequency.

Frequency

16-bit unsigned little-endian integer value (uint16le).

in Hz.

540.3.2 Durations v3.05done

Exactly 5 repetitions of Duration.

Duration

16-bit unsigned little-endian integer value (uint16le).

in ms.

Unknown data

At address aeh: Unknown data of size 1h.

Call display mode

At address afh: Enumeration of size 1h, with 3 options.

Value	Name	Description
0	Off
1	Call
2	Name

Unknown data

At address b0h: Unknown data of size 1h.

Enable blue tooth

At address b1h: 8-bit unsigned integer value (uint8). Default value 0h.

If set to 1, blue tooth is enabled.

Blue tooth and internal mic

At address b2h: 8-bit unsigned integer value (uint8). Default value 0h.

If set to 1, the bluetooth and internal mic are used.

Blue tooth and internal speaker.

At address b3h: 8-bit unsigned integer value (uint8). Default value 0h.

If set to 1, blue tooth and the internal speaker are used.

Enable plug-in recording tone

At address b4h: 8-bit unsigned integer value (uint8). Default value 0h.

Whatever that is. Here you can enable it.

Ranging interval

At address b5h: 8-bit unsigned integer value (uint8). Default value 5h.

Specifies the ranging interval in seconds. Valid values are [5,255].

No offset. Nobody gave a f**k. I wonder, what happens if one sets it to 0.

Blue tooth mic gain

At address b6h: 8-bit unsigned integer value (uint8).

Specifies the microphone gain for the blue tooth source.

Valid values are 1-5, encoded as 0-4. That is, 0=1, ..., 4=5.

Blue tooth speaker gain

At address b7h: 8-bit unsigned integer value (uint8). Default value 2h.

Specifies the speaker gain for the blue tooth output.

Valid values are 1-5, encoded as 0-4. That is, 0=1, ..., 4=5.

Channel number mode

At address b8h: Enumeration of size 1h, with 2 options. WTF, really? Specifies whether the total or within-zone number is show as the channel number. It makes absolutely no sense to show a total channel number, dear AnyTone engineer. The user can only access channels through a zone. So, if a channel is not assigned to any zone, it is basically hidden. So, explain to me, why should anyone care about the absolute channel number?

Value	Name	Description
0	Total
1	Within Zone

Enable show current contact

At address b9h: 8-bit unsigned integer value (uint8). Default value 0h.

Enables the display of the current contact.

Why is the default off? Isn't it a pretty important information?

Auto-roaming period

At address bah: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the auto-roaming period (if enabled) in multiples of 1 minute.

The period is stored as n + 1min. That is 0=1min, 1=2min, ..., 255=256min.

Key tone volume

At address bbh: 8-bit unsigned integer value (uint8). Default value 0h.

A value in range [1,15]. If set to 0 it is adjustable.

Call sign color

At address bch: Enumeration of size 1h, with 7 options. Specifies the color, the callsign is shown in. Because it is incredible important to be able to set it. Default is orange (0).

Value	Name	Description
0	Orange
1	Red
2	Yellow
3	Green
4	Turquoise
5	Blue
6	White

Units

At address bdh: Enumeration of size 1h, with 2 options. .

Value	Name	Description
0	Metric
1	Archaic

Unknown data

At address beh: Unknown data of size 0h:3.

Forced lock FoLk

At address beh:4: boolean value. Default value 0h.

Side key lock SkLk

At address beh:3: boolean value.

If set, the side keys are locked too.

Unknown data

At address beh:2: Unknown data of size 0h:1.

Enable keyboard lock KbLk

At address beh:1: boolean value. Default value 0h.

If enabled, the keyboard is locked.

Enable knob lock KnLk

At address beh:0: boolean value. Default value 0h.

If set, the knob is also locked.

Roaming delay

At address bfh: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the delay in seconds between a auto-roaming trigger and the actual auto-roaming.

Valid values are [None, 1s, 30s], where None is encoded as 0.

Standby text color

At address c0h: Enumeration of size 1h, with 8 options. Another palette. Thanks! Seriously dear AnyTone engineer. Why for f**k sake can't you produce a consistent encoding of colors? It is called copy-and-paste. The produces a lot of code you can impress your supervisor with at zero cost. Give it a try, you gonna love it.

Value	Name	Description
0	White
1	Black
2	Orange
3	Red
4	Yellow
5	Green
6	Turquoise
7	Blue

Standby background image

At address c1h: Enumeration of size 1h, with 3 options. Specifies a wallpaper for the radio. Yes, very important feature.

Value	Name	Description
0	Default
1	Custom 1
2	Custom 2

Show last caller on boot

At address c2h: 8-bit unsigned integer value (uint8). Default value 0h.

If set to 1, shows the last caller after boot.

Why do I need to know that? That might be ages ago.

SMS standard

At address c3h: Enumeration of size 1h, with 3 options. Specifies the SMS standard to use.

Value	Name	Description
0	Motorola
1	Hytera
2	ETSI DMR

VHF auto-repeater 1 min frequency

At address c4h: 32-bit unsigned little-endian integer value (uint32le). Default value 0h.

Specifies the lower bound of the first VHF auto-repeater frequency range.

The freuqency is stored in multiples of 10Hz.

VHF auto-repeater 1 max frequency

At address c8h: 32-bit unsigned little-endian integer value (uint32le).

Speifies the upper bound of the first VHF auto-repeater frequency range.

The frequency is stored in multiples of 10Hz.

UHF auto-repeater 1 min frequency

At address cch: 32-bit unsigned little-endian integer value (uint32le). Default value 0h.

Specifies the lower bound of the first UHF auto-repeater frequency range.

The freuqency is stored in multiples of 10Hz.

UHF auto-repeater 1 max frequency

At address d0h: 32-bit unsigned little-endian integer value (uint32le).

Speifies the upper bound of the first UHF auto-repeater frequency range.

The frequency is stored in multiples of 10Hz.

Auto-repeater B direction

At address d4h: Enumeration of size 1h, with 3 options.

Value	Name	Description
0	Off
1	Positive
2	Negative

Send FM own ID

At address d5h: 8-bit unsigned integer value (uint8). Default value 0h.

in CPS.

Unknown data

At address d6h: Unknown data of size 1h.

Enable default boot channel

At address d7h: 8-bit unsigned integer value (uint8).

If set to 1, a default channel for VFO A and B is set.

Boot zone VFO A

At address d8h: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the zone index for the boot zone.

That is, the zone selected for VFO A at boot.

Boot zoot VFO B

At address d9h: 8-bit unsigned integer value (uint8).

Default boot zone for VFO B

Encodes the 0-based boot zone for the VFO B. That is, the zone being selected at bootup.

Default boot channel VFO A

At address dah: 8-bit unsigned integer value (uint8). Default value ffh.

Specifies the channel index within the boot zone.

If set to ffh, the VFO is selected.

Default boot channel VFO B

At address dbh: 8-bit unsigned integer value (uint8). Default value ffh.

Encodes the channel index for the boot channel for VFO B.

That is, the 0-based index of the channel within the boot zone B. If ffh is selected, the VFO is selected as the boot channel.

Roaming zone index

At address dch: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the 0-based roaming zone index.

Enable repeater check

At address ddh: 8-bit unsigned integer value (uint8). Default value 0h.

Repeater check interval

At address deh: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the repeater check interval in multuples of 5s. The period is 5s * n + 5s with valid values in 5s - 50s.

Repeater check retry count

At address dfh: 8-bit unsigned integer value (uint8). Default value 0h.

Number is specified as 3 + n with valid values in [3, 5].

Auto-roaming start condition

At address e0h: Enumeration of size 1h, with 2 options. Specifies, when auto roaming is triggered.

Value	Name	Description
0	Periodic	Auto roaming starts periodically.
1	Out-of-range	Auto roaming starts on out-of-range event.

Backlight duration TX

At address e1h: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the duration of the backlight during TX.

Encodes the duration in seconds. Valid values are [1,30]. If set to 0, the backlight is disabled during TX.

Show menu separator

At address e2h: 8-bit unsigned integer value (uint8). Default value 0h.

If set to 1, shows menu separators.

Keep last caller

At address e3h: 8-bit unsigned integer value (uint8). Default value 0h.

If set to 1, the last caller is kept when the channel is changed.

Channel A name color

At address e4h: Enumeration of size 1h, with 7 options. Specifies the color of the channel name. Because it is incredible important to be able to set it. Default is orange (0).

Value	Name	Description
0	Orange
1	Red
2	Yellow
3	Green
4	Turquoise
5	Blue
6	White

Repeater check OOR notification

At address e5h: Enumeration of size 1h, with 3 options. Specifies the mode of notification for an out-of-range event.

Value	Name	Description
0	Off
1	Tone
2	Voice

Backlight duration RX

At address e6h: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the duration of the backlight during RX.

The duration is specified in seconds. Valid values are [1,30] seconds. If set to 0 the backlight stays on.

Enable auto roamin

At address e7h: 8-bit unsigned integer value (uint8). Default value 0h.

If set to 1, enables auto roaming.

Unknown data

At address e8h: Unknown data of size 1h.

Mute duration

At address e9h: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the duration of a mute in minutes, triggered by a function key.

The duration is specified as t = 1min + 1min * n. That is 0=1min, ..., 255 = 256min.

Repeater check OOR notification count

At address eah: 8-bit unsigned integer value (uint8).

Number of notifications for a out-of-range event. The number is specified as n + 1 with an valid value in [1, 10].

Enable GPS test

At address ebh: 8-bit unsigned integer value (uint8). Default value 0h.

If set to 1, the GPS gets tested at boot.

Enable MCU reset

At address ech: 8-bit unsigned integer value (uint8). Default value 1h.

Blue tooth hold duration

At address edh: Enumeration of size 1h, with 33 options.

Value	Name	Description
0	Off
1	1s
2	2s
3	3s
4	4s
5	5s
6	6s
7	7s
8	8s
9	9s
10	11s
11	12s
12	13s
13	14s
14	15s
15	16s
16	17s
17	18s
18	19s
19	20s
20	21s
21	22s
22	23s
23	24s
24	25s
25	26s
26	27s
27	28s
28	29s
29	30s
30	60s
31	120s
32	Infinite

Blue tooth RX delay

At address eeh: 8-bit unsigned integer value (uint8). Default value 2h.

Delay in multiples of 500ms.

That is 500ms + 500ms * n: 0=500ms, 1=1s, ..., 10=5.5s.

Unknown data

At address efh: Unknown data of size 1h.

541 B channels v3.04done

Element at address 2500100h of size 400h.

B channel.

541.1 A channel List v3.04done

Element at address 0h of size 200h.

541.1.1 Channel indices v3.04done

Exactly 250 repetitions of Channel index.

Channel A indices for all possible zones.

Channel index

16-bit unsigned little-endian integer value (uint16le). Default value 0h.

Specifies a 0-based channel index. No special values.

Unused data

At address 1f4h: Unused data of size ch: 00

541.2 B channel List v3.04done

Element at address 200h of size 200h.

541.2.1 Channel indices v3.04done

Exactly 250 repetitions of Channel index.

Channel B indices for all possible zones.

Channel index

16-bit unsigned little-endian integer value (uint16le). Default value 0h.

Specifies a 0-based channel index. No special values.

Unused data

At address 1f4h: Unused data of size ch: 00

542 DTMF Ids v3.05done

Exactly 16 repetitions of DTMF Id.

Encodes DTMF PTT ids.

543 DTMF Id v3.05done

Exactly 16 repetitions of DTMF digit.

DTMF digit

8-bit unsigned integer value (uint8). Default value ffh.

Valid values 0h - fh. If not set, ffh.

544 Boot Settings v3.05done

Element at address 2500600h of size 30h.

Boot text line 1

At address 0h: ASCII string of length (up to) 14 chars, 00h-padded. Specifies the first line of the boot text.

Pad bytes

At address eh: Unused data of size 2h: 00 00

Boot text line 2

At address 10h: ASCII string of length (up to) 14 chars, 00h-padded. Encodes the second line of the boot text.

Pad bytes

At address 1eh: Unused data of size 2h: 00 00

Boot password

At address 20h: ASCII string of length (up to) 8 chars, 00h-padded. Plain boot password.

Although this is an ASCII string, only digits are allowed. That is 30h-39h.

Unused data

At address 28h: Unused data of size 8h: 00

545 APRS settings

Element at address 2501000h of size 240h.

Unknown data

At address 0h: Unknown data of size 5h.

FM APRS TX delay

At address 5h: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the transmit FM APRS delay in multiple of 20ms. Valid values are 0-5100ms.

FM APRS sub tone type

At address 6h: Enumeration of size 1h, with 3 options. Specifies the transmit sub-tone for FM APRS.

Value	Name	Description
0	None
1	CTCSS
2	DCS

FM APRS TX CTCSS tone

At address 7h: Enumeration of size 1h, with 51 options.

Value	Name	Description
0	62.5 Hz
1	67.0 Hz
2	69.3 Hz
3	71.9 Hz
4	74.4 Hz
5	77.0 Hz
6	79.7 Hz
7	82.5 Hz
8	85.4 Hz
9	88.5 Hz
10	91.5 Hz
11	94.8 Hz
12	97.4 Hz
13	100.0 Hz
14	103.5 Hz
15	107.2 Hz
16	110.9 Hz
17	114.8 Hz
18	118.8 Hz
19	123.0 Hz
20	127.3 Hz
21	131.8 Hz
22	136.5 Hz
23	141.3 Hz
24	146.2 Hz
25	151.4 Hz
26	156.7 Hz
27	159.8 Hz
28	162.2 Hz
29	165.5 Hz
30	167.9 Hz
31	171.3 Hz
32	173.8 Hz
33	177.3 Hz
34	179.9 Hz
35	183.5 Hz
36	186.2 Hz
37	189.9 Hz
38	192.8 Hz
39	196.6 Hz
40	199.5 Hz
41	203.5 Hz
42	206.5 Hz
43	210.7 Hz
44	218.1 Hz
45	225.7 Hz
46	229.1 Hz
47	233.6 Hz
48	241.8 Hz
49	250.3 Hz
50	254.1 Hz

FM APRS DCS code

At address 8h: 16-bit unsigned little-endian integer value (uint16le).

Encodes the DCS code in a complex way.

That is, the least significant 9 bits encode the binary DCS code and 9th bit encodes the inverted flag of DCS.

Manual TX interval

At address ah: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the manual TX interval in second. 0: Off, 1-255.

Automatic TX interval

At address bh: 8-bit unsigned integer value (uint8).

Specifies the interval in multiples of 30s. 0:Off. Valid values 30-7650s.

APRS monitor enable

At address ch: Enumeration of size 1h, with 2 options. Listen to the APRS packet transmission.

Value	Name	Description
0	Off
1	On

Fixed location index

At address dh: 8-bit unsigned integer value (uint8). Default value 0h.

Speicfies which fixed location to use.

The index is stored +1. That is 1= index 0, ... . If 0 is set, GPS is used for the location.

545.1 Fixed location 0 v3.05done

Element at address eh of size 8h.

Latitude degree

At address 0h: 8-bit unsigned integer value (uint8).

Encodes the first position latitude degree value.

Latitude minute

At address 1h: 8-bit unsigned integer value (uint8).

Latitude seconds

At address 2h: 8-bit unsigned integer value (uint8).

Latitude hemisphere

At address 3h: Enumeration of size 1h, with 2 options.

Value	Name	Description
0	North
1	South

Longitude degree

At address 4h: 8-bit unsigned integer value (uint8).

Longitude minute

At address 5h: 8-bit unsigned integer value (uint8).

Longitude seconds

At address 6h: 8-bit unsigned integer value (uint8).

Longitude hemisphere

At address 7h: Enumeration of size 1h, with 2 options.

Value	Name	Description
0	East
1	West

Destination call

At address 16h: ASCII string of length (up to) 6 chars, 00h-padded.

Destination SSID

At address 1ch: 8-bit unsigned integer value (uint8). Default value 0h.

Source call

At address 1dh: ASCII string of length (up to) 6 chars, 00h-padded.

Source SSID

At address 23h: 8-bit unsigned integer value (uint8).

APRS path string 0-14h

At address 24h: ASCII string of length (up to) 21 chars, 00h-padded. First half of the APRS path string. Contains the first 24 bytes.

APRS symbol table

At address 39h: 8-bit signed integer value (int8).

A char!

APRS symbol

At address 3ah: 8-bit signed integer value (int8).

A char!

FM APRS transmit power

At address 3bh: Enumeration of size 1h, with 4 options.

Value	Name	Description
0	Low
1	Mid
2	High
3	Max

Prewave delay

At address 3ch: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the pre-wave delay in multiples of 10ms. Valid values are 0-2550ms.

Unknown data

At address 3dh: Unknown data of size 3h.

545.2 DMR APRS settings v3.04done

Element at address 40h of size 38h.

545.2.1 Channel indices v3.04done

Exactly 8 repetitions of Channel index.

Channel index

16-bit unsigned little-endian integer value (uint16le). Default value 0h.

0-based transmit channel. 0fa0=VFO A, 0fa1=VFO B, 0fa2=Current

545.2.2 Destination DMR IDs v3.04done

Exactly 8 repetitions of DMR destination ID.

DMR destination ID

32-bit bcd big-endian integer value (bcd8be). Default value 0h.

545.2.3 Call types v3.04done

Exactly 8 repetitions of Call type.

Call type

Enumeration of size 1h, with 3 options.

Value	Name	Description
0	Private Call
1	Group Call
2	All Call

Roaming support

At address 78h: Enumeration of size 1h, with 2 options.

Value	Name	Description
0	Disabled
1	Enabled

545.3 DMR APRS time slots v3.04done

Exactly 8 repetitions of Time slot.

Time slot

Enumeration of size 1h, with 3 options.

Value	Name	Description
0	Channel slot
1	Time slot 1
2	Time slot 2

Repeater activation delay

At address 81h: 8-bit unsigned integer value (uint8).

Delay in multiples of 100ms. 0=Off.

Valid values are Off, 100ms, ..., 1000ms.

APRS display duration

At address 82h: 8-bit unsigned integer value (uint8).

Specifies the time, an APRS message is shown. Stored as 3s + n seconds.

That is, 0=3s, 1=4s, ... ch=15s, dh = infinity.

APRS path 15h-38h

At address 83h: ASCII string of length (up to) 35 chars, 00h-padded. Second half of the APRS path.

Fixed altitude

At address a6h: 16-bit unsigned little-endian integer value (uint16le).

Encodes the fixed altitude in feet.

Status report flag FStat

At address a8h:7: boolean value.

flag.

NEMA report flag FNEMA

At address a8h:6: boolean value.

flag.

Weather report flag FWX

At address a8h:5: boolean value.

Sets the weather report flag.

Message flag FMsg

At address a8h:4: boolean value.

flag.

Item flag FItem

At address a8h:3: boolean value.

flag.

Object flag FObj

At address a8h:2: boolean value.

flag.

Mic-E flag FMicE

At address a8h:1: boolean value.

flag.

Position Flag FPos

At address a8h:0: boolean value. Default value 0h.

flag.

Unused data

At address a9h:7: Unused data of size 0h:7: 00

Other flag FOther

At address a9h:0: boolean value. Default value 0h.

flag.

FM APRS bandwidth

At address aah: Enumeration of size 1h, with 2 options.

Value	Name	Description
0	Narrow
1	Wide

Enable AX.25 CRC check

At address abh: Enumeration of size 1h, with 2 options. If disabled, the all decoded AX.25 frames are processed, even those with invalid CRCs.

Value	Name	Description
0	On
1	Off

545.4 FM APRS frequencies v3.04done

Exactly 8 repetitions of FM APRS Frequency.

FM APRS Frequency

32-bit bcd big-endian integer value (bcd8be). Default value 0h.

Unknown data

At address cch: Unknown data of size 1h.

545.5 Fixed locations 1-7 v3.05done

Element at address cdh of size 38h.

545.5.1 Fixed location latitude degree v3.05done

Exactly 7 repetitions of Latitude degree.

Latitude degree

8-bit unsigned integer value (uint8). Default value 0h.

545.5.2 Fixed location latitude minute v3.05done

Exactly 7 repetitions of Latitude minute.

Latitude minute

8-bit unsigned integer value (uint8).

545.5.3 Fixed latitude seconds v3.05done

Exactly 7 repetitions of Latitude seconds.

Latitude seconds

8-bit unsigned integer value (uint8).

545.5.4 Fixed location latitude hemispheres v3.05done

Exactly 7 repetitions of Latitude hemisphere.

Latitude hemisphere

Enumeration of size 1h, with 2 options.

Value	Name	Description
0	North
1	South

545.5.5 Fixed location longitude degree v3.05done

Exactly 7 repetitions of Longitude degree.

Longitude degree

8-bit unsigned integer value (uint8).

545.5.6 Fixed location longitude minute v3.05done

Exactly 7 repetitions of Longitude minute.

Longitude minute

8-bit unsigned integer value (uint8).

545.5.7 Fixed location longitude seconds v3.05done

Exactly 7 repetitions of Longitude seconds.

Longitude seconds

8-bit unsigned integer value (uint8).

545.5.8 Fixed location longitude hemispheres v3.05done

Exactly 7 repetitions of Longitude hemisphere.

Longitude hemisphere

Enumeration of size 1h, with 2 options.

Value	Name	Description
0	East
1	West

Unknown data

At address 105h: Unknown data of size fbh.

APRS message

At address 200h: ASCII string of length (up to) 60 chars, 00h-padded.

Unknown data

At address 23ch: Unknown data of size 4h.

546 DMR APRS message v3.05done

Element at address 2501280h of size 30h.

DMR APRS message

At address 0h: ASCII string of length (up to) 32 chars, 00h-padded.

Unused data

At address 20h: Unused data of size 10h: 00

547 General Settings Extension

Element at address 2501400h of size 200h.

Unknown data

At address 0h: Unknown data of size 0h:5.

Show color code ShCoCo

At address 0h:2: boolean value. Default value 0h.

If enabled, the color code is shown.

Show time slot ShTiSl

At address 0h:1: boolean value. Default value 0h.

If enabled, the time slot is shown.

Show channel type ShChTy

At address 0h:0: boolean value. Default value 0h.

If enables, the channel type is shown.

Unknown data

At address 1h: Unknown data of size 1h.

Date format

At address 2h: Enumeration of size 1h, with 2 options. Specifies the format, the date is shown in.

Value	Name	Description
0	Big Endian	YYYY/MM/DD
1	Little Endian	DD/MM/YYYY

Unknown data

At address 3h: Unknown data of size 1bh.

Talker alias priority

At address 1eh: Enumeration of size 1h, with 3 options.

Value	Name	Description
0	Off
1	Contact
2	Over the air

Talker alias encoding

At address 1fh: Enumeration of size 1h, with 3 options.

Value	Name	Description
0	ISO 7
1	ISO 8
2	Unicode

Unknown data

At address 20h: Unknown data of size 1h.

Enable blue tooth PTT latch

At address 21h: 8-bit unsigned integer value (uint8). Default value 0h.

If set to 1, one press with lattch the PTT and a second press will unlatch the PTT again.

UHF auto-repeater 2 offset index

At address 22h: 8-bit unsigned integer value (uint8). Default value ffh.

Specifies the 0-based index of the offset frequency for the second UHF auto-repeater frequency range.

VHF auto-repeater 2 offset index

At address 23h: 8-bit unsigned integer value (uint8). Default value ffh.

Specifies the 0-based index of the offset frequency for the second VHF auto-repeater frequency range.

VHF auto-repeater 2 min frequency

At address 24h: 32-bit unsigned little-endian integer value (uint32le). Default value 0h.

Specifies the lower bound of the second VHF auto-repeater frequency range.

The freuqency is stored in multiples of 10Hz.

VHF auto-repeater 2 max frequency

At address 28h: 32-bit unsigned little-endian integer value (uint32le). Default value 0h.

Specifies the upper bound of the second VHF auto-repeater frequency range.

The freuqency is stored in multiples of 10Hz.

UHF auto-repeater 2 min frequency

At address 2ch: 32-bit unsigned little-endian integer value (uint32le). Default value 0h.

Specifies the lower bound of the second UHF auto-repeater frequency range.

The freuqency is stored in multiples of 10Hz.

UHF auto-repeater 2 max frequency

At address 30h: 32-bit unsigned little-endian integer value (uint32le). Default value 0h.

Specifies the upper bound of the second UHF auto-repeater frequency range.

The freuqency is stored in multiples of 10Hz.

Blue tooth PTT sleep delay

At address 34h: 8-bit unsigned integer value (uint8). Default value 2h.

Specifies the delay befor the BT PTT button goes into sleep mode.

Encodes as minutes. Valid values are [Infinite, 1min, ..., 4min], where 0=Infinite.

GPS Modes

At address 35h: Enumeration of size 1h, with 3 options.

Value	Name	Description
0	GPS
1	BDS
2	Both

STE duration

At address 36h: 8-bit unsigned integer value (uint8). Default value 25h.

Specifies the STE duration in mutliples of 10ms. Valid values are [10ms-1000ms]

Manual dial group call hang time

At address 37h: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies hang time in seconds. That is. 0=1s, ..., 29=30s, 30=30min, 31=infinite.

Manual dial private call hang time

At address 38h: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies hang time in seconds. That is. 0=1s, ..., 29=30s, 30=30min, 31=infinite.

Channel B name color

At address 39h: Enumeration of size 1h, with 7 options. Specifies the color of the channel name. Because it is incredible important to be able to set it. Default is orange (0).

Value	Name	Description
0	Orange
1	Red
2	Yellow
3	Green
4	Turquoise
5	Blue
6	White

Encryption Type

At address 3ah: Enumeration of size 1h, with 2 options.

Value	Name	Description
0	Common/DMR
1	AES/ARC4

Enable TOT reminder

At address 3bh: 8-bit unsigned integer value (uint8). Default value 0h.

If set to 1, five seconds before the transmit timeout, a warn tone sounds.

Enable transmit power AGC

At address 3ch: 8-bit unsigned integer value (uint8). Default value 0h.

Zone A name color

At address 3dh: Enumeration of size 1h, with 7 options. Specifies the color of the zone name. Because it is incredible important to be able to set it. Default is orange (0).

Value	Name	Description
0	Orange
1	Red
2	Yellow
3	Green
4	Turquoise
5	Blue
6	White

Zone B name color

At address 3eh: Enumeration of size 1h, with 7 options. Specifies the color of the zone name. Because it is incredible important to be able to set it. Default is orange (0).

Value	Name	Description
0	Orange
1	Red
2	Yellow
3	Green
4	Turquoise
5	Blue
6	White

Disable auto-shutoff timer reset on call

At address 3fh: 8-bit unsigned integer value (uint8). Default value 0h.

If set to 1, the auto-shutoff timer is not reset by a call.

Unknown data

At address 40h: Unknown data of size 1h.

Enable FM channel free tone

At address 41h: 8-bit unsigned integer value (uint8). Default value 0h.

Unknown data

At address 42h: Unknown data of size 1h.

FM mic gain

At address 43h: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the FM microphone gain.

Valid values are [1, ..., 5], encoded as n + 1. That is, 0=1, ..., 4=5.

Enable GPS roaming.

At address 44h: 8-bit unsigned integer value (uint8). Default value 0h.

Unknown data

At address 45h: Unknown data of size 1h.

547.1 Call end melody v3.05done

Element at address 46h of size 14h.

547.1.1 Tones v3.05done

Exactly 5 repetitions of Frequency.

Frequency

16-bit unsigned little-endian integer value (uint16le).

in Hz.

547.1.2 Durations v3.05done

Exactly 5 repetitions of Duration.

Duration

16-bit unsigned little-endian integer value (uint16le).

in ms.

547.2 All-call melody v3.05done

Element at address 5ah of size 14h.

547.2.1 Tones v3.05done

Exactly 5 repetitions of Frequency.

Frequency

16-bit unsigned little-endian integer value (uint16le).

in Hz.

547.2.2 Durations v3.05done

Exactly 5 repetitions of Duration.

Duration

16-bit unsigned little-endian integer value (uint16le).

in ms.

Header repetitions

At address 6eh: 8-bit unsigned integer value (uint8). Default value 2h.

Specifies how often the so-called voice header is repeated. Valid values are 2, ..., 8.

Unknown data

At address 6fh: Unknown data of size 191h.

548 APRS receive filter bank v3.04done

Exactly 32 repetitions of APRS filter.

549 APRS filter v3.04done

Element of size 8h.

Encodes a single APRS filter based on call and SSID.

Enable filter

At address 0h: Enumeration of size 1h, with 2 options.

Value	Name	Description
0	Off
1	On

Call

At address 1h: ASCII string of length (up to) 6 chars, 00h-padded. Specifies the call to filter.

SSID

At address 7h: 8-bit unsigned integer value (uint8). Default value 10h.

Specifies the SSID of the call. Valid values 0h-fh, 10h = Off.

550 GPS roaming zone bank v3.04done

Exactly 32 repetitions of GPS roaming zone.

Encodes up to 32 GPS roaming zones.

551 GPS roaming zone v3.04done

Element of size 20h.

Encodes a single GPS roaming zone.

Description

That is, a position and radio defining a region associated with a certain roaming zone. Whenever the radio enters this region, the associated roaming zone gets selected.

Zone enable

At address 0h: Enumeration of size 1h, with 2 options.

Value	Name	Description
0	Off
1	On

Roaming zone index

At address 1h: 8-bit unsigned integer value (uint8). Default value ffh.

Specifies the roaming zone index to use. If set to ffh, the zone is disabled.

Latitude degree

At address 2h: 8-bit unsigned integer value (uint8). Default value 0h.

Specifies the integer part of the latitude in degrees.

Valid value range 0-89.

Latitude minutes

At address 3h: 8-bit unsigned integer value (uint8). Default value 0h.

Encodes the integer latitude minute part.

Valid value range 0-59.

Latitude centi-minute

At address 4h: 8-bit unsigned integer value (uint8).

Encodes the 1/100th of a minute.

Valid value range 0-99.

Latitude hemisphere

At address 5h: Enumeration of size 1h, with 2 options.

Value	Name	Description
0	North
1	South

Longitude degrees

At address 6h: 8-bit unsigned integer value (uint8). Default value 0h.

Encodes the integer part of the latitude degree.

Valid value range 0-179.

Longitude minutes

At address 7h: 8-bit unsigned integer value (uint8). Default value 0h.

Encodes the longitude minutes.

Valid value range 0-59.

Longitude centi-minutes

At address 8h: 8-bit unsigned integer value (uint8). Default value 0h.

Encodes the 1/100th part of the minute.

Valid value range 0-99.

Longitude hemisphere

At address 9h: Enumeration of size 1h, with 2 options.

Value	Name	Description
0	East
1	West

Unused data

At address ah: Unused data of size 2h: 00

Radius

At address ch: 16-bit unsigned little-endian integer value (uint16le). Default value 0h.

The unit is specified in the setting.

Unused data

At address eh: Unused data of size 12h: 00

552 Zone Names v3.04done

Between 1 and 250 repetitions of Zone Name.

Zone Name

ASCII string of length (up to) 32 chars, 00h-padded.

553 Radio Ids v3.04done

Up to 250 repetitions of Radio Id Element.

554 Radio Id Element v3.04done

Element of size 20h.

DMR Id

At address 0h: 32-bit bcd big-endian integer value (bcd8be).

Unused data

At address 4h: Unused data of size 1h: 00

Name

At address 5h: ASCII string of length (up to) 16 chars, 00h-padded.

Unused data

At address 15h: Unused data of size bh: 00

555 Primary ID Settings v3.05done

Element at address 2582000h of size 20h.

Primary DMR ID

At address 0h: 32-bit bcd big-endian integer value (bcd8be). Default value 0h.

Used flag

At address 4h: Enumeration of size 1h, with 2 options.

Value	Name	Description
0	Unused
1	Used

Primary radio name

At address 5h: ASCII string of length (up to) 26 chars, 00h-padded.

Pad byte

At address 1fh: Unused data of size 1h: 00

556 FM Quick Call Bank v3.05done

Element at address 25c0000h of size 100h.

556.1 FM Quick Calls v3.05done

Exactly 4 repetitions of FM Qick Call.

556.2 FM Qick Call v3.05done

Element of size 2h.

Type

At address 0h: Enumeration of size 1h, with 4 options.

Value	Name	Description
0	None
1	DTMF
2	Two-Tone
3	Five-Tone

Analog Contact Index

At address 1h: 8-bit unsigned integer value (uint8). Default value 0h.

0-based index, ffh=none.

Unused data

At address 8h: Unused data of size f8h: 00

557 Status Messages v3.05done

Exactly 32 repetitions of Status Message.

Status Message

ASCII string of length (up to) 32 chars, 00h-padded.

558 Hot-Key Settings v3.05done

Exactly 18 repetitions of Hot-Key Setting.

559 Hot-Key Setting v3.05done

Element of size 30h.

Type

At address 0h: Enumeration of size 1h, with 2 options.

Value	Name	Description
0	Call
1	Menu

Menu Item

At address 1h: Enumeration of size 1h, with 15 options.

Value	Name	Description
0	None
1	Show SMS Menu
2	Show New SMS Menu
3	Show Hot Text Menu
4	Show SMS Inbox
5	Show SMS Outbox
6	Show Contacts
7	Show Menual Dial Menu
8	Show Call Log
9	Show outgoing calls
10	Show received calls
11	Show missed call
12	Show Zone menu
13	Show Radio Settings Menu
14	Show Channel Settings Menu

Call Type

At address 2h: Enumeration of size 1h, with 2 options.

Value	Name	Description
0	FM
1	DMR

DMR Call Type

At address 3h: Enumeration of size 1h, with 7 options.

Value	Name	Description
255	Off
0	Group Call
1	Private Call
2	All Call
3	Hot Text
4	Call Tip
5	Status Message

Contact Index

At address 4h: 32-bit unsigned little-endian integer value (uint32le). Default value 0h.

0-based index, ffffffffh = none.

Used for both, FM and DMR contacts.

Message Index

At address 8h: 8-bit unsigned integer value (uint8). Default value ffh.

0-based SMS message index or status message index. ffh = none.

Unused data

At address 9h: Unused data of size 27h:

560 Status Message Bitmap Element v3.05done

Element at address 25c0b00h of size 10h.

560.1 Status Message Bitmap v3.05done

Exactly 32 repetitions of Status Message Bit.

Status Message Bit

boolean value. Default value 0h.

Unused data

At address 4h: Unused data of size ch: 00

561 Group List Bitmap Element v3.04done

Element at address 25c0b10h of size 20h.

561.1 Group List Bitmap v3.04done

Exactly 250 repetitions of Group List Enable.

Group List Enable

boolean value.

Unused data

At address 1fh:5: Unused data of size 0h:6:

562 ARC4 encryption keys v3.04done

Exactly 255 repetitions of ARC4 encryption key.

563 ARC4 encryption key v3.04done

Element of size 10h.

Key id

At address 0h: 8-bit unsigned integer value (uint8). Default value 0h.

Valid values 1-255. 0=Off.

Key bits

At address 1h: 40-bit unsigned big-endian integer value (uint40be). Default value 0h.

Unused data

At address 6h: Unused data of size ah: 00

564 ARC4 key bitmap v3.04done

Element at address 25c1c00h of size 20h.

564.1 ARC4 enable bits v3.04done

Exactly 255 repetitions of Key enable bit.

Key enable bit

boolean value.

Unused data

At address 1fh:0: Unused data of size 0h:1: 00

565 Valid contact indices v3.04done

Exactly 10000 repetitions of Contact index.

Some weird contact index map, containing the indices of up to 10000 valid contacts.

Contact index

32-bit unsigned little-endian integer value (uint32le). Default value ffffffffh.

Specifies the index of a valid contact.

566 Contact Bitmap Element v3.04done

Element at address 2640000h of size 4f0h.

566.1 Contact Bitmap v3.04done

Exactly 10000 repetitions of Contact disable bit.

Contact disable bit

boolean value. Default value 0h.

Unused data

At address 4e2h: Unused data of size eh: 00

567 Contact banks v3.04done

Up to 10 repetitions of Contact Bank.

568 Contact Bank v3.04done

Up to 10000 repetitions of Contact.

569 Contact v3.04done

Element of size 64h.

Call Type

At address 0h: Enumeration of size 1h, with 3 options. Specifies the call type of the contact.

Value	Name	Description
0	Private Call
1	Group Call
2	All Call

Name

At address 1h: ASCII string of length (up to) 16 chars, 00h-padded.

Unused data

At address 11h: Unused data of size 12h: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

DMR ID

At address 23h: 32-bit bcd big-endian integer value (bcd8be).

Call Alert

At address 27h: Enumeration of size 1h, with 0 options.

Unused data

At address 28h: Unused data of size 3ch:

570 Analog Contact Index List v3.05done

Exactly 128 repetitions of Analog Contact Index.

Analog Contact Index

8-bit unsigned integer value (uint8).

Stores the 0-based index of the i-th entry.

If not set, set to ffh.

571 Analog Contact ByteMap v3.05done

Exactly 128 repetitions of Analog Contact Enable Byte.

Analog Contact Enable Byte

8-bit unsigned integer value (uint8).

Inverted bytemap for every contact entry. 0=enabled, ffh = disabled

572 Analog Contacts v3.05done

Up to 128 repetitions of DTMF Contact.

573 DTMF Contact v3.05done

Element of size 18h.

DTMF Number

At address 0h: 56-bit bcd big-endian integer value (bcd14be).

Number Length

At address 7h: 8-bit unsigned integer value (uint8).

Name

At address 8h: ASCII string of length (up to) 15 chars, 00h-padded.

Pad Byte

At address 17h: Unused data of size 1h: 00

574 Group List Bank v3.04done

Up to 250 repetitions of Group List.

575 Group List v3.04done

Element of size 120h.

575.1 Contact Indices v3.04done

Exactly 64 repetitions of Contact Index.

Contact Index

32-bit unsigned little-endian integer value (uint32le). Default value ffffffffh.

0-based

Name

At address 100h: ASCII string of length (up to) 16 chars, 00h-padded.

Unused data

At address 110h: Unused data of size 10h:

576 Call-sign Index Banks v3.08done

Some repetitions of None.

577 Call-sign Index Bank v3.08done

Up to 16000 repetitions of Call-sign Index Entry.

578 Call-sign Index Entry v3.08done

Element of size 8h.

DMR ID and Group Call Flag

At address 0h: 32-bit unsigned little-endian integer value (uint32le).

1) | GCF

Contact Offset

At address 4h: 32-bit unsigned little-endian integer value (uint32le).

579 Contact Map v3.04done

Up to 10000 repetitions of Contact Map Entry.

580 Contact Map Entry v3.04done

Element of size 8h.

DMR ID and Group Call Flag

At address 0h: 32-bit unsigned little-endian integer value (uint32le).

1) | GCF

Contact Index

At address 4h: 32-bit unsigned little-endian integer value (uint32le).

581 Call-sign Database Limits v3.08done

Element at address 4840000h of size 10h.

Entry Count

At address 0h: 32-bit unsigned little-endian integer value (uint32le). Default value 0h.

Specifies the number of entries in the call-sign database.

End-of-database address

At address 4h: 32-bit unsigned little-endian integer value (uint32le).

Absolute memory address of the end-of-database.

Unknown data

At address 8h: Unknown data of size 8h.

582 Call-sign DB Banks v3.08done

Up to 20000 repetitions of Call-sign database bank.

583 Call-sign database bank v3.08done

Up to 1000 repetitions of Call-sign database entry.

584 Call-sign database entry v3.08done

Element of size 64h.

Call Type

At address 0h: Enumeration of size 1h, with 3 options.

Value	Name	Description
0	Private Call
1	Group Call
2	All Call

DMR ID

At address 1h: 32-bit bcd big-endian integer value (bcd8be). Default value 0h.

Unknown data

At address 5h: Unknown data of size 0h:3.

Friend Flag

At address 5h:4: boolean value. Default value 0h.

Unknown data

At address 5h:3: Unknown data of size 0h:2.

Ring Tone

At address 5h:1: 2-bit unsigned integer value (uint2). Default value 0h.

Description

At address 6h: ASCII string of length (up to) 93 chars, 00h-padded. A 0-separated list of strings. Containing name, city, call, state, country, comment.

Pad byte

At address 63h: Unused data of size 1h: 00