The cool things about these radios is any of the limited ones can be 'changed' into the highend, or even more.
The codeplug layout appears to be the same for most US versions of the radios, but there are some which are different. The majority of modification of these radios to amateur service is done with modifications to the codeplug. This is the same area the programing data from CPS is written in, but CPS is unable to change it. This is simply a packed (hex) data written into the eeprom chip of the radio containing tuning, feature and programing data. What I've found is the radios features are determined by the 'codeplug' settings. I've not seen any of the European ones, but I've been working with the US versions for FM service in ham radio. Over time, I've gotten more into these with the CDM1250/1550 and other waris series radios. They modified ok, but the way of doing it as suggested left much to be desired, and the DTMF pad didn't work and the radios were narrow band only. This was originally put together when I got into the HT1250 200 MHz radios.
1.3.1 AAHLN9725C - Voice Storage Option board.