nk6110.txt

NOKIA手机开发包

					     where type: 0x01 - service number, 0x00 - IP
    r Get WAP settings 2 err{ 0x001d,error}
                            where: error=0x05    
0x40: Security commands
    s ???                   {+0x00, 0x00, 0x07, 0x11, 0x00, 0x10, 0x00, 0x00}
                            This frame hangs phone (N3310 4.02). Meaning unknown !
    s Open simlock 1        { 0x02, 0x03, 0x1f, 0x11, 0x01, 0x01, 0x10, 0x00}
    r Open simlock 1        { 0x02 }
    s ???(N6150)            { 0x08, 0x00 }
    r ???(N6150)            { 0x08 }
    s Enable extended cmds  { 0x64, cmd }
                            where cmd: 0x00: off
                                       0x01: on
                                       0x02: enter service mode ?
                                       0x03: reset (doesn't ask for PIN again)
                                       0x04: reset (PIN is requested)
                                             In 5110 makes reset without PIN
                                       0x06: CONTACT SERVICE!!! Don't try it!
    s Reset phone settings  { 0x65, value, 0x00 }
                            where value: 0x08 - reset UI (User Interface) settings
                                         0x38 - reset UI, SCM and call counters
    r Reset phone settings  { 0x65, 0x00 }
    s Get IMEI              { 0x66 }
    r Get IMEI              { 0x66, 0x01, IMEI, 0x00}
    s (ACD Readings)?(N6150 { 0x68 }
    r (ACD Readings)?(N6150 { 0x68, ... }
    s Get Product Profile
      Settings              { 0x6a}
    r Get Product Profile
      Settings              { 0x6a, 4bytes with Product Profile Settings }
    s Set Product Profile
      Settings              { 0x6b, 4bytes with Product Profile Settings }
    r Set Product Profile
      Settings OK ?         { 0x6b }
    s Get code              { 0x6e, code }
                            where code: see 0x08/0x0004 (only sec.code is allowed)
    r Get code              { 0x6e, code, allowed, allowed? (sec code (text)) }
                            where code: see 0x08/0x0004
                                  allowed: 0: no
                                           1: yes
    s Set code              { 0x6f, code, sec code(text), 0x00 }
                            where code: see 0x08/0x0004
    s Start monitoring      { 0x70, block }
                            where block(N6150):
                              0x7f,0xff,0xff,0xff,0xff,0xff,0xff,0xff,0xff,0xff,
                              0xff,0xff,0xff,0xff,0xff,0xf9,0x76,0x65,0x20,0x00,
                              0x00,0x00,0x00,0x00,0x18,0x26,0x15,0x7d,0x0a,0x00,
                              0xf5,0x82,0x7f,0xff,0xff,0xff,0xff,0xff,0xff,0xff,
                              0xff,0xff,0xff,0xff,0xff,0xff,0xff,0xf0,0x77,0x80,
                              0x77,0x80,0xf2,0x82,0x20,0x20,0x20,0x20,0x20,0x20,
                              0x20,0x20,0x20,0x20
                            This block enables probably all possible monitorred parameters.
                            After it phone sends 0x00 message type values
    s Break monitoring      { 0x71 }
    r Break monitoring      { 0x71 }
    s Reset Permanent
      Counters (nm->test36) { 0x74, 0x01, 0x01, 0x0e }
    r Reset Permanent
      Counters (nm->test36) { 0x74 }
    s Call commands         { 0x7c, block }
                            where where: command, (values)
                                 command: 0x01
                                     values: number(ASCII), 0x00 - makes voice call
                                 command: 0x02 - answer call
                                 command: 0x03 - release call
    r Call commands         { 0x7c, command }
    s Netmonitor            { 0x7e, field }
                            where: field: 00: next
                                          F0: reset
                                          F1: off
                                          F2: field test menus
                                          F3: developer menus
    s Open simlock 2        { 0x81, 0x01, locknumber, 0x10, 0x10, 0x10, 0x10, 0x10 }
                            Note: sets simlock type to factory?
                            where locknumber: 1,2,4,8
    s Open simlock 2        { 0x81, 0x01, locknumber }
                            where locknumber: 1,2,4,8
    s Close simlock         { 0x82, 0x01, locknumber, 0x00, 0x00, locksinfo(lock1,4,2,3), 0x00 }
                            where locknumber: 1,2,4,8
    r Close simlock         { 0x82, the rest like in 0x40/0x8a }
    s Get simlock info      { 0x8a, 0x00}
    r Get simlock info      { 0x8a, 0x00, 0x01, lockstype, locksclosed, 0x00, 0x00, locksinfo(lock1,4,2,3), counter1,counter2,counter4,counter4,0x00 }
                            where: lockstype:   bit1,bit2,bit3,bit4 - if set, selected lock is user lock
                                   locksclosed: bit1,bit2,bit3,bit4 - if set, selected lock is closed
                                   counter1 - counter4: counters for locks
    s Set downloaded OpName { 0x8b, 0x00, MCC1, MCC2, MNC, Name, 0x00 }
    r SetdownloadedOpNameOK?{ 0x8b, 0x00, 0x01 }
    s Get downloaded OpName { 0x8c, 0x00 }
    r Get downloaded OpName { 0x8c, 0x00, 0x01, MCC1, MCC2, MNC, Name, 0x00,...}
    s Buzzer pitch          { 0x8f, volume, hzHI, hzLO }
                            if volume and hz is 0, it's off
    r Buzzer pitch          { 0x8f}
    s ACD Readings ?        { 0x91, parameter?(0x02,0x03,0x04,0x05,0x07) }
    r ACD Readings ?        { 0x91, parameter?, value? }
    s Sleep mode test       { 0x92, 0x00, 0x00, howlong(2 bytes), enable }
                            where: enable == 0x01 - enable after test
                                             0x00 - don't enable after test
                                   howlong (ms) = 0x07, 0xd0 = 2000
    s ???(N6150)            { 0x98, 0x00 }
    r ???(N6150)            { 0x98, 0x00, 0x04 }
    s Get bin ringtone      { 0x9e, location }
                            where: location=0,1,etc.
    r Get bin ringtone      { 0x9e, location, error, contents... }
                            where location=0,1,etc.
                                  error=0x0a, ringtone NOT available
                                        0x00, OK
    s Set bin ringtone      { 0xa0, location, 0x00, contenst... }
                            where: location=0,1,etc.
    r Set bin ringtone      { 0xa0, location, error }
                              where location=0,1,etc.
                                    error=0x0a, ringtone NOT set
                                          0x00, ringtone set OK
    r Get MSid              { 0xb5, 0x01, 0x2f, msid, 0x25 }
    s Get info about phone  { 0xc8, 0x01 }
    r Get info about phone  { 0xc8, 0x01, 0x00, "V ", "firmware", 0x0a, "firmware date", 0x0a, "model", 0x0a, "(c) NMP.", 0x00 }
    s Get MCU SW Checksum   { 0xc8, 0x02 }
    r Get MCU SW Checksum   { 0xc8, 0x02, 0x00, checksum (4 bytes),0x00 }
    s DPS External SW       { 0xc7, 0x03 }
    r DSP External SW       { 0xc7, 0x03, 0x00, string,0x00 }
    s Get HW                { 0xc8, 0x05 }
    r Get HW                { 0xc8, 0x05, 0x00, HW version (4 bytes), 0x00 }
    s Get "Made" Date       { 0xc8, 0x05 }
    r Get "Made" Date       { 0xc8, 0x05, 0x00, date(4 bytes), 0x00 }
    s Get DSP Internal SW   { 0xc8, 0x09 }
    r Get DSP Internal SW   { 0xc8, 0x09, 0x00, version (1 bytes), 0x00 }
    s Get PCI version       { 0xc8, 0x0b }
    r Get PCI version       { 0xc8, 0x0b, 0x00, version, 0x00 }
    s Get system ASIC       { 0xc8, 0x0c }
    r Get system ASIC       { 0xc8, 0x0c, 0x00, string, 0x00 }
    s Get COBBA             { 0xc8, 0x0d }
    r Get COBBA             { 0xc8, 0x0d, 0x00, string, 0x00 }
    s Get PLUSSA            { 0xc8, 0x0e }
    r Get PLUSSA            { 0xc8, 0x0e, available, 0x00 }
                            where available: 0x01: not available
    s Get CCONT             { 0xc8, 0x0f }
    r Get CCONT             { 0xc8, 0x0f, available, 0x00 }
                            where available: 0x01: not available
    s Get PPM version       { 0xc8, 0x10 }
    r Get PPM version       { 0xc8, 0x10, 0x00, "V ", "firmware", 0x0a, "firmware date", 0x0a, "model", 0x0a, "(c) NMP.", 0x00 }
    s Get PPM info          { 0xc8, 0x12 }
    r Get PPM info          { 0xc8, 0x12, 0x00, PPM version ("B", "C", etc.), 0x00 }
    s Set HW version        { 0xc9, 0x05, version, 0x00 }
    s Get Product Code      { 0xca, 0x01 }
    r Get Product Code      { 0xca, 0x01, 0x00, number, 0x00 }
    s Get Order Number      { 0xca, 0x02 }
    r Get Order Number      { 0xca, 0x02, 0x00, string, 0x00 }
    s Get Prod.Ser.Number   { 0xca, 0x03 }
    r Get Prod.Ser.Number   { 0xca, 0x03, 0x00, number, 0x00 }
    s Get Basic Prod.Code   { 0xca, 0x04 }
    r Get Basic Prod.Code   { 0xca, 0x04, 0x00, number, 0x00 }
    s Set Product Code      { 0xcb, 0x01, product code, 0x00 }
    s Set Order Number      { 0xcb, 0x02, number, 0x00 }
    s Set Prod.Ser.Number   { 0xcb, 0x03, number, 0x00 }
    s Get (original ?)IMEI  { 0xcc, 0x01 }
    r Get (original ?)IMEI  { 0xcc, 0x01, IMEI, 0x00 }
    s Get Manufacture Month { 0xcc, 0x02 }
    r Get Manufacture Month { 0xcc, 0x02, 0x00, string, 0x00 }
    s Get Purchare date     { 0xcc, 0x04 }
    r Get Purchare date     { 0xcc, 0x04, 0x00, string, 0x00 }
    s Set "Made" date       { 0xcd, 0x02, string, 0x00 }
    s Make "all" phone tests{ 0xce,0x1d,0xfe,0x23,0x00,0x00}
    s Make one phone test   { 0xce,0x1d,num1,num2,num3,num4}
                            Where num1-num4: 0x02,0x00,0x00,0x00;
                                             0x04,0x00,0x00,0x00;
                                             0x08,0x00,0x00,0x00;
                                             0x10,0x00,0x00,0x00;
                                             0x20,0x00,0x00,0x00;
                                             0x40,0x00,0x00,0x00;
                                             0x80,0x00,0x00,0x00;
                                             0x00,0x01,0x00,0x00;
                                             0x00,0x02,0x00,0x00;
                                             0x00,0x04,0x00,0x00; - "Power off"
                                               No test for "Security data"
                                             0x00,0x10,0x00,0x00;
                                             0x00,0x20,0x00,0x00;
                                             0x00,0x40,0x00,0x00;
                                             0x00,0x80,0x00,0x00;
                                             0x00,0x00,0x01,0x00;
                                             ....
                                             0x00,0x00,0x10,0x00;
    s Result of phone tests { 0xcf }
    r Result of phone tests { 0xcf, number of tests, results of next tests }
    s ???                   { 0xd1 }
    r ???(N5110)            { 0xd1, 0x00, 0x1d, 0x00, 0x01, 0x08, 0x00 }
    s LCD Test              { 0xd3, value }
                            where value: 0x03, 0x02 - 1'st test
                                         0x03, 0x01 - 2'nd test
                                         0x02, 0x03 - clears screen
    s ACD Readings(N6150)?  { 0xd4, 0x02, 0x00, 0x02, 0x00, 0x0e, 0x01}
    r ACD Readings(N6150)?  { 0xd4, 0x02, 0x00, 0x02, 0x00, 0x0e, 0x01, ?}
    s Get EEPROM            { 0xd4, 0x02, 0x00, 0xa0, locationLo, locationHi, numofbytes }
                            where: numofbytes - how many bytes to read
                            Note: Works ONLY in MBUS
    r Get EEPROM            { 0xd4, 0x02, 0x00, 0xa0, locationLo, locationHi, numofbytes, contest... }
                            where numofbytes - how many bytes available
                                  contest - bytes with contests (if numofbytes != 0)
0x41: Snake game ?
0x47:
    s Get Picture Image     { 0x0001, location }
    r Get Picture Image     when contains sender number
                            { 0x0002, location, number(like in SMS), 0x00, len, text, 0x00, width, height, 0x01, bitmap }
                              NOTE:
                              Supports only 0x81 and 0x91 coding (NOT alphanumeric numbers!)
                              in sender without sender number
                            { 0x0002, location, 0x00, 0x00, 0x00, len, text, 0x00, width, height, 0x01, bitmap }
    s Set Picture Image     { 0x0003, frame...}
                            where frame: see 0x47/0x0002
    r Get/Set PictureImageOK{ 0x0004 }
    r Set Picture Image err { 0x0005, error? }
                            where error=0x74 - wrong location ?
0x64: (Nokia 3310 seems to not respond to this frame)
    s Phone ID request      { 0x0010 }
    r Phone ID recvd        { 0x0011, "NOKIA", "imei", 0, "model", 0, "prod.code", 0, "HW", 0, "firmware", magic bytes x 4 ... }
    s Accessory connection  { 0x0012, 16x0x00, 'NOKIA&NOKIA accessory', 3x0x00 } (45 bytes)
0x7f: Acknowledge(FBUS/IRDA){+type, seq }
      Acknowledge(MBUS)...
0xd0: 
    s Power on message seq1 {+04 }
    r Power on message seq1 {+05 }
0xd1:
    s Get HW&SW version     { 0x0003, 0x00 }
0xd2:
    r Get HW&SW version     { 0x0003 "V " "firmware\n" "firmware date\n"
                              "model\n" "(c) NMP." }
0xda: ? (during playing 2 player snake)
0xf0:
    s Send RLP frame        {+0x00, 0xd9, ... }
0xf4: Power on message seq 2