Mapping Of Transfer Frame & EMMI Fields

This list lists the differnt fields that have been found in transfer frames or otherwise mapped by trial and error (Remember to backup your EEPROM!). "Field" describes the field number for the field in question, "Subfields" describes how many subfields are associated with the single field. "Length" states the length of the packet in hex. I really need help to maintain and expand this list. Please experiment vigorously and share your results. When trying to map these, make plenty of notes, so you can go back and check what you actually did. Use testmode to look for changes - many fields affect settings and values there. I especially want feedback on the syntax and translation of the data. One thing is identifying that a field affects something, another more time consuming thing is describing how to specifically use this field. The colour coding of the field numbers state if they are normally present in the transfer frames.

Writing to a field above BD doesn't give any changes in the EEPROM. The table below contains information for a cd920/cd930 (old software version A0.04.26 - The phone was hooked up with BDM to easily monitor the EEPROM and the fields were systematically checked.

Please be patient, the table is quite long and will take a while to load.....

Field Subfields Length Description
01 01 02 Configuration checksum
02 01 04 EEPROM map version
03 01 18 PA Calibration Table
04 01 09 RX Calibration Table (AGC)
05 01 0E ?
06 01 01 ?
07 01 01 ?
08 01 04 ?
09 01 20 ?
0A 01 C8 (Located in frame 1) ?
0B 01 C8  
0C 01 09  
0D 01 02 Factory Flags, normally "03FF", change to "13FF" for permanent instant test mode
0E 01 7A Menu definitions, keypad layout
0F 01 01  
10 04 81 Wakeup Graphics / Hardware information (on units with text display)
11 01 30 Wakeup Text
12 01 01  
13 01 24  
14 01 03  
15 01 A1  
16 01 00 Unused
17 01 02  
18 0A 16  
19 01 02  
1A 0A 0E  
1B 01 00 Unused
1C 01 04 Lifetime meter (seconds, long int).
1D 01 04 Resetable call timer (seconds, long int)
1E 01 3C  
1F 01 04 ???
20 01 04 ???
21 01 05 ???
22 01 05  
23 01 28  
24 01 05  
25 01 05  
26 01 05  
27 01 04 Backlight Flag
28 01 01 Long DTMF Tones
29 01 01  
2A 01 01  
2B 01 01  
2C 01 01 DTX Flag
2D 01 01 Keypad Tones
2E 01 01  
2F 01 02  
30 01 01  
31 01 04  
32 01 01  
33 01 01  
34 01 01  
35 01 02  
36 01 02  
37 01 03 Security Code
38 01 01 Lock Flag
39 01 02 Lock Code
3A 01 01  
3B 01 01  
3C 01 01  
3D 01 03  
3E 01 01  
3F 01 01  
40 01 01  
41 01 01  
42 01 01  
43 01 01  
44 01 01  
45 01 01  
46 01 01 Language setting
47 01 02  
48 0A 24 Last numbers dialed
49 01 02  
4A 01 01  
4B 0A 24 Phonebook entry
4C 01 02  
4D 0A 24 10 last calls received
4E 01 24  
4F 01 03  
50 01 01  
51 01 64 Self Diagnostics Table (7100#)
52 01 04  
53 01 01  
54 01 0A  
55 01 01  
56 01 01  
57 01 04  
58 01 01  
59 01 01  
5A 01 01  
5B 01 32  
5C 01 01  
5D 01 01  
5E 01 01  
5F 01 01  
60 01 01  
61 01 01  
62   10  
63   01  
64   01  
65   01 Automatic lock
66   02  
67   01  
68   03  
69   01  
6A   01  
6B   20  
6C   09  
6D   20  
6E   12  
6F   30  
70   09  
71   04  
72   08  
73   02  
74   01  
75   01  
76   01  
77   01  
78   01  
79   01  
7A   01  
7B   28  
7C   01  
7D   08  
7E   0A  
7F   01  
80   0A  
81   01  
82   01  
83   01  
84 02 24  
85   0B  
86 05 24  
87 03 2B Network provider name additions
88   28  
89   14  
8A   09  
8B   09  
8C   03  
8D   24  
8E   01  
8F 06 01  
90 07 14  
91   01  
92   01  
93   01  
94   02  
95   01  
96   01  
97   01  
98   02  
99   02  
9A   01  
9B   01  
9C   01  
9D   01  
9E   01  
9F   01  
A0   01  
A1   01  
A2   03  
A3   01  
A4   01  
A5   01  
A6   01  
A7   01  
A8   01  
A9   03  
AA   01  
AB   01  
AC   01  
AD   01  
AE   01  
AF   01  
B0   28  
B1   01  
B2   01  
B3   0A  
B4   03  
B5   01  
B6   01  
B7   01  
B8   01  
B9   01  
BA   01  
BB   00 Unused
BC   01  
BD   04  

 

� 1998 Janus Christian Krarup