Motorola^® Flip Phone Programming

One day, I decided to experiment with the Motorola DPC test mode (on an older model of phone than that which I disassembled).

Test mode is engaged by providing continuity on the J6 battery connector between pin 2 and ground.  This is accomplished by inserting a conductor such as a bit of foil in the pin recess and replacing the battery, or using a special test battery with a momentary contact switch.  Press PWR with the foil inserted or the switch depressed.

The DPC can now be used normally, but the display is different.  On powerup (after the lock code is entered, if enabled), the DPC displays something like:

        [345 076 ]
        [2012110 ]

or

        [354 085 ]
        [3012110 ]

Presumably these numbers provide information about signal strength and connection type.

To place the DPC in manual test mode, press #.  The DPC displays:

        [   U5  ']

The ' character is the cursor for test codes.  Enter a test code followed by #.  Unrecognized codes cause:

        [   ERRoR]

Test codes 0-9 cause an error.

Test code 00 causes an error.

Test code 01 causes a powerup selftest.

Test code 02 scrolls a number ending with something like:

        [84010110]

Test codes 03-12 have no known effect.

Test code 13 causes a powerdown.

Test codes 14-17 have no known effect.

Test code 18 is used to program system IDs to be ignored while roaming.  The DPC displays the first of five system IDs to ignore.

        [ 0 40000]

Enter a system ID.  The range of valid system IDs is 0..32767, or 40000 to represent an unprogrammed system ID.  Enter a new system ID (if desired), then press # to abort or press * to save/continue. Aborting returns you to the manual test mode.  Saving displays the next system ID.  Saving the last system ID returns you to the manual test mode.

Test code 19 displays what might be a manufacturing date:

        [   '9308]

Test code 20 or 21 displays what might be a memory dumper:

        [    '20']

Entering other digits (blind) followed by # causes the DPC to display something like:

        [ 003 004]

Test codes 22 and 23 have a similar effect, but the DPC displays something like:

        [   00019]

Test code 24 causes an error.

Test codes 25 to 27 have no known effect.

Test code 28 causes a continuous tone.  Test code 29 turns it off.

Test code 30 causes a different continuous tone.  Test code 31 turns it off.

Test code 32 has no known effect.

Test code 33 followed by any keypad key causes that key's tone to be generated continuously.  Test code 34 turns it off.

Test code 35 has no known effect.

Test code 36 causes an error.

Test code 37 has no known effect.

Test code 38 displays:

        [   00 C3]

Pressing # clears it.

Test code 39 scrolls a number ending with D1979781.

Test code 40 has no known effect.

Test codes 41-44 cause an error.

Test code 45 displays something like:

        [    '081]

Test code 46 has no known effect.

Test code 47 turns off the keypad sound.  At this point I discovered that one of the earlier test codes had turned off the lock code.

Test codes 48 and 49 have no known effect.

Test codes 50 and 51 cause an error.

Test codes 52-54 have no known effect.

Test code 55 displays something like:

        [   00038]

The user can now enter a new number, or CLR to restore the 00038.  I have not experimented with trying to store other values.

Test code 56 lights IU, NS, Rm and displays:

        [88888888]

This appears to be a display test.  Pressing # ends the test.

Test code 57 causes an error.

Test codes 58 and 59 have no known effect.

Test codes 60 and 61 cause an error.

Test code 62 turns on the keypad sound after test code 47 turned it off.

Test code 63 displays:

        [     F10]

and locks the system except for the PWR button.

Test codes 64 and 65 have no known effect.

Test code 66 displays:

        [    FA1L]

and locks the system except for the PWR button.

Test code 67 displays:

        ['170 004]

Test code 68 displays:

        [ '2214FC]

Test code 69 locks the system except for the PWR button.  The NS light is on steady.

Test codes 70 and 71 cause an error.

Test code 72 displays:

        [   04 04]

and other keypresses modify these numbers.  CLR restores 04 04, but it seems to take PWR to reset the system.

Test code 73 causes an error.

Test codes 74-98 cause an immediate error, before the #.

Test code 99 causes an error.

Some three digit codes are accepted.

At the end of this session, I discovered that all functions had been reset to factory, as well as stored numbers and even the lifetime timer. To be sure of this I removed the jumper and performed my own factory reset according to the instructions in the manual, then reprogrammed the DPC.

I went through the programming procedure to get the following info:
 

Description	Current	Factory
system ID	00038	00000
area code	214	111
phone no	5462218	1110111
class station mark	14	06, 14, or 12
access overload class	08
group ID	10	00
security code	xxxxxx	000000
unlock code	xxx	123
initial paging channel	0334	0334
options	011100	010100
options	11100	11100