How to get Cobba ID via M-bus. READ ALL.!!!!!!!!

[43e08]

Please read this:

This document covers the FBUS/IRDA and MBUS

NOTE: this information isn't (and can't be) complete. If you know anything<br />about features not listed here or you noticed a bug in this list, please<br />notify us via e-mail. Thank you.

Message types for NSE-x (6110 and derivatives):<br /> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~<br /> Frame format for FBUS/IRDA:

{ FrameID, DestDEV, SrcDEV, MsgType, 0x00, FrameLength, {block}, FramesToGo,<br /> SeqNo, PaddingByte?, ChkSum1, ChkSum2 }

where FrameID: 0x1c: IR / FBUS<br /> 0x1e: Serial / FBUS<br /> DestDev, SrcDev: 0x00: mobile phone<br /> 0x0c: TE (FBUS) [eg. PC]<br /> MsgType: see List<br /> FrameLength: {block} + 2 (+ 1 if PaddingByte exists)<br /> FramesToGo: 0x01 means the last frame<br /> SeqNo: [0xXY]<br /> X: 4: first block<br /> 0: continuing block<br /> Y: sequence number<br /> PaddingByte: 0x00 if FrameLength would be an odd number<br /> anyways it doesn't exists<br /> ChkSum1: XOR on frame's odd numbers<br /> ChkSum2?: XOR on frame's even numbers

Frame format for MBUS:<br /> <br /> { FrameID, DestDEV, SrcDEV, MsgType, FrameLengthLO, FrameLengthHI, {block},<br /> SeqNo, ChkSum }

where FrameID: 0x1f: Serial / M2BUS<br /> DestDev, SrcDev: 0x00: mobile phone<br /> 0x10: TE (M2BUS) ? (found in nokia511052x.zip)<br /> 0x1d: TE (M2BUS)<br /> 0x10: TE (M2BUS) (LM, WinTesla)<br /> MsgType: see List<br /> FrameLength: {block}<br /> SeqNo: sequence number<br /> ChkSum: XOR on frame's all numbers

Please note that M2BUS has only one checksum: XOR on frame[FrameID..SeqNo]

List format:

hex: Short description<br /> x msg desc { ... }<br /> 0xXX -&gt; one byte<br /> 0xXXYY -&gt; two bytes (== 0xXX, 0xYY)

where hex: message type<br /> x: s=send (eg. to mobile), r=receive<br /> { ... }: data after 0x00, 0x01 header<br /> {+... }: raw data (without header)

List:

0x01: Call Information<br /> s voice call? { 0x0001, "numbers", 5,1,1,5,81,1,0,0,1 }<br /> s data call? { 0x0001, "numbers", 1,2,1,5,81,1,0,0,1,2,10,7,162,136,129,33,21,99,168 ,0,0 }<br /> r Call going msg { 0x0002}<br /> r Call in progress { 0x0003, seqnr }<br /> r Remote end hang up { 0x0004, seqnr, ?, error (like in netmon in 39) }<br /> r incoming call alert { 0x0005, seqnr, numlen, "number", namelen, "name" }<br /> r answered call { 0x0007, seqnr }<br /> r terminated call { 0x0009, seqnr }<br /> r call msg { 0x000a, seqnr }<br /> r Send DTMF/voice call { 0x0040}<br /> s ??? { 0x0042, 5,1,7,0xa2,0x88,0x81,0x21,0x15,0x63,0xa8,0,0,7,0xa 3,0xb8,0x81,0x20,0x15,0x63,0x80 }<br /> s ??? sent after { 0x0042,0x05,0x01,0x07,0xa2,0xc8,0x81,0x21,0x15,0x6 3,0xa8,0x00,0x00,0x07,0xa3,0xb8,0x81,<br /> issuing data call 0x20,0x15,0x63,0x80,0x01,0x60}<br /> s Send DTMF { 0x0050, length, {ascii codes for DTMF}, 0x01 }<br />0x02: SMS handling<br /> s Send SMS message { 0x0001, 0x02, 0x00 (SEND REQUEST), ... }<br /> r Message sent { 0x0002 }<br /> r Send failed { 0x0003, ?, ?, error (like in netmon in 65)} <br /> s Get SMS message { 0x0007, 0x02, location, 0x01, 0x64 }<br /> s Initiate connection { 0x000d, 0x00, 0x00, 0x02 }<br /> r Initiate ACK { 0x000e, 0x01 }<br /> r SMS message received { 0x0010, ...... } (whole message)<br /> s Set CellBroadcast { 0x0020, 0x01, 0x01, 0x00, 0x00, 0x01, 0x01 }<br /> for enable cell broadcast ?<br /> 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 }<br /> for disable cell broadcast ?<br /> r Set CellBroadcast OK { 0x0021, 0x01 }<br /> r Read CellBroadcast { 0x0023, ?, ?, ?, channel, ?, message... } ?<br /> s Set SMS center { 0x0030, 0x64, priority, checksum? ,0?, format,<br /> validity, {DefaultRecipient no.}[12], <br /> {SMScenter no.}[12], {SMSC name}, 0x00}<br /> where tel.no.[12]: {len, type, {number(BCD)}}<br /> type: 0x81: normal<br /> 0x91: + (international)<br /> 0xd0: alphanumeric<br /> format: 0x00: text<br /> 0x22: fax<br /> 0x24: voice<br /> 0x25: ERMES<br /> 0x26: paging<br /> 0x31: X.400<br /> 0x32: email<br /> validity: 0x0b: 1 hour<br /> 0x47: 6 hours<br /> 0xa7: 24 hours<br /> 0xa9: 72 hours<br /> 0xad: 1 week<br /> 0xff: max.time<br /> r Set SMS center OK { 0x0031 }<br /> r Set SMS center error { 0x0032, reason }<br /> s Get SMS center { 0x0033, 0x64, priority }<br /> r SMS center received { 0x0034, priority, checksum?, format, 0x00?,<br /> validity, {DefaultRecipient no.}[12],<br /> {SMScenter no.}[12], {SMSC name}, 0x00}<br /> tel.no[12]: {len, type, {number(BCD)}} <br /> where priority, checksum, type, validity,<br /> tel.no.[12]: see 0x02/0x0030<br /> r SMS center error recv { 0x0035, reason }<br />0x03: Phonebook functions<br /> s Get mem location { 0x0001, memtype, location, 0 }<br /> where memory:<br /> 0x01: telephone and SIM phonebook (in one)<br /> 0x02: telephone phonebook<br /> 0x03: SIM phonebook<br /> 0x04: SIM fixdialling-phonebook (?)<br /> 0x05: Own numbers<br /> 0x07: Dialled numbers<br /> 0x08: Missed calls<br /> 0x09: Received calls<br /> 0x0b: voice mailbox (location not important)<br /> r mem location recvd { 0x0002, 0x00,namelen,"name",numlen,"number",groupID, 0x01?, yearLO, yearHI, month, day, hour, minute, sec. }<br /> Note: in 3310 all entries have null name ("feature" of bug ?)<br /> r mem loc error recvd { 0x0003, errtype }<br /> where errtype: 0x7d: invalid memory type<br /> s Set mem location { 0x0004, memtype,location,namelen,"Name",numlen,"number",gr oupID }<br /> r mem set OK { 0x0005 }<br /> r mem set error { 0x0006, errtype }<br /> where errtype: 0x7d: name is too long<br /> s Mem status request { 0x0007, memtype }<br /> r Mem status recvd { 0x0008, memtype, free, used }<br /> r Mem status error recv { 0x0009, errtype }<br /> where errtype: 0x6f: mem status error<br /> 0x7d: invalid memory type<br /> 0x8d: waiting for pin<br /> s Get caller group data { 0x0010, groupID }<br /> r Get caller group data { 0x0011, groupID, size, "Name", ringtoneID, graphic_on?1:0, lenHI, lenLO, OTABitmap (72x14 logo) }<br /> r Get call.group error { 0x0012, reason }<br /> where reason: 0x7d: invalid location<br /> s Set caller group data { 0x0013, groupID, size, "Name", ringtoneID, graphic_on?1:0, lenHI, lenLO, OTABitmap (72x14 logo) }<br /> r Set caller group OK { 0x0014 }<br /> r Set call.group error { 0x0015, reason }<br /> where reason: 0x7d: invalid location<br /> s Get speed dial { 0x0016, index(1-9) }<br /> r Get speed dial OK { 0x0017, mem.type, location }<br /> where mem.type: 0x02: ME (== 0 if not stored)<br /> 0x03: SIM<br /> location: memory location (== 0 if not stored)<br /> r Get speed dial error { 0x0018 }<br /> s Set speed dial { 0x0019, index(1-9), mem.type, location }<br /> r Set speed dial OK { 0x001a }<br /> r Set speed dial error { 0x001b }<br />0x04: Phone Status<br /> s Phone status { 0x0001 }<br /> r Phone status { 0x0002, mode, signal str, ???, pwr, batt.level }<br /> where mode: 1: registered within the network<br /> 2: call in progress<br /> 3: waiting for pin<br /> 4: powered off<br /> pwr: 1: AC/DC<br /> 2: battery<br /> s Request Phone ID { 0x0003 }<br /> r RequestPhone ID { 0x0004, 0x01, "imei", 0, "model", 0, "prod.code", 0, "HW", 0, "firmware", 0x00, 0x01 }<br />0x05: Profile settings<br /> s Set profile feature { 0x0010, 1, nr, feature, a, 1 }<br /> where nr: see 0x05/0x0013<br /> feature: see 0x05/0x0014<br /> a: see 0x05/0x0014<br /> r Set profile feat. OK { 0x0011, 1 }<br /> s Get profile feature { 0x0013, 1, nr, feature, 1 }<br /> where nr is profile number (general=0, silent, meeting, outdoor, pager, car, headset=6)<br /> feature: see 0x05/0x0014<br /> r Get profile feature { 0x0014, 1, nr, feature, 4, a, b, c, d, 1 }<br /> Features and answers (in a, b, c, d form):<br /> 0x00: keypad notes<br /> xx, 1, 0, 2<br /> xx: 0xff: off<br /> 0x00: level 1<br /> 0x01: level 2<br /> 0x02: level 3<br /> 0x01: lights (? only in car profile)<br /> xx, 0, 0, 1<br /> xx: 0x00: off<br /> 0x??: on (maybe 0x01)<br /> 0x02: incoming call alert<br /> xx, 1, 0, 7<br /> xx: 1: ringing,<br /> 2: beep once,<br /> 3: unknown<br /> 4: off<br /> 5: ring once<br /> 6: ascending<br /> 7: caller groups (see feature #0x08)<br /> 0x03: ringing tone<br /> xx, 0, 0, 0<br /> xx: 0x12: ring ring<br /> 0x13: low<br /> etc<br /> 0x04: rining volume<br /> xx, 0, 0, 0<br /> xx: level 1 (0x06) - level 5 (0x0a)<br /> 0x05: message alert tone<br /> xx, 1, 0, 4<br /> xx: 0: no tone<br /> 1: standard<br /> 2: special<br /> 3: beep once<br /> 4: ascending<br /> 0x07: warning and game tones<br /> xx, 4, 0, 4<br /> xx: 0xff: off<br /> 0x04: on<br /> 0x08: incoming caller groups<br /> xx, 0, 0, 0<br /> xx: 1: family<br /> 2: VIP<br /> 4: friends<br /> 8: collegues<br /> 16: other<br /> 0x09: automatic answer<br /> xx, 0, 0, 1<br /> xx: 0x00: off<br /> 0x01: on <br /> s Get welcome message { 0x0016 }<br /> r Get welcome message { 0x0017, no.of blocks, { block } * }<br /> where block: { id, {blockspecific} }<br /> id: 1: startup logo { y, x, picture (coding?) }<br /> 2: welcome note { len, "message" }<br /> 3: operator msg { len, "message" }<br /> s Set welcome message { 0x0018, no.of blocks, { block } * }<br /> where block: see 0x05/0x0017<br /> r Set welcome OK { 0x0019, 0x01 }<br /> s Get profile name { 0x001a, nr }<br /> where nr: see 0x05/0x0013<br /> r Profile name { 0x001b, 1, 1, 3, flen, nr, len, {text} }<br /> where nr: see 0x05/0x0013<br /> len: text length <br /> flen len + len(nr, len) = len + 2<br /> s ??? { 0x001c }<br /> r ??? { 0x001d, 0x93 }<br /> s Set oplogo { 0x0030, location, MCC1, MCC2, MNC, lenhi=0x00, lenlo=0x82, OTABitmap }<br /> r Set oplogo OK { 0x0031 }<br /> r Set oplogo error { 0x0032, reason }<br /> where reason: 0x7d invalid location<br /> s Get oplogo { 0x0033, location }<br /> where location: 1 (doesn't seem to matter)<br /> r Get oplogo { 0x0034, location, MCC1, MCC2, MNC, lenhi=0x00, lenlo=0x82, OTABitmap }<br /> r Get oplogo error { 0x0035, reason }<br /> where reason: 0x7d invalid location<br /> s Set ringtone { 0x0036, location,0x00,0x78, ringtone packed according to SM2.0}<br /> r Set ringtone OK { 0x0037 }<br /> r Set ringtone error { 0x0038, reason }<br /> where reason=0x7d, when not supported location<br /> s Get services settings { 0x0080, setting (2 bytes) }<br /> where: setting: 0x02,0x00=Nokia access number 1<br /> 0x02,0x01=Operator access number 1<br /> 0x01,0x00=Personal bookmark 1 settings (name only ?)<br /> 0x01,0x01=?<br /> 0x02,0x02=?<br /> r Get services sett.OK { 0x0081, .... }<br /> r Get services sett.err { 0x0082, 0x7b }<br />0x06:<br /> r Get prepaid(?) info { 0x0005, ?,?,?,length,message(packed like in 7bit SMS)}<br />0x07:<br /> s ??? { 0x0022, ? (1&2 sounds OK) }<br /> r ??? OK { 0x0023, ?,?,? }<br /> r ??? error { 0x0024, reason }<br /> s ??? { 0x0025, ??? }<br /> r ??? OK { 0x0026, ??? }<br /> r ??? error { 0x0027, reason }<br />0x08: Security codes<br /> s Change code { 0x0004, code, "current", 0x00, "new", 0x00 }<br /> where code: 1: security code (5 chars)<br /> 2: PIN (4 chars)<br /> 3: PIN2 (4 chars)<br /> 4: PUK (8 chars)<br /> 5: PUK2 (8 chars)<br /> s Status request { 0x0007, 0x01 }<br /> r pin recvd { 0x0008, accepted }<br /> where accepted: 0x0c (or 0x06): OK<br /> code: waiting for (0x08/0x0004) code<br /> s entering code { 0x000a, code, "code", 0x00 }<br /> where code: see 0x08/0x0004<br />0x09: SIM login<br /> r login { 0x0080 }<br /> r logout { 0x0081 }<br />0x0a: Network status<br /> s Key duplication on/off{ 0x0044, on? 0x01: 0x02 }<br /> s get used network { 0x0070 }<br /> r network registration { 0x0071, ?,?,?,length,netstatus,netsel,cellIDH,cellIDL,lacH ,lacL,netcode,netcode,netcode }<br />0x0c: Keys<br /> s Get key assignments { 0x0040, 0x01 }<br /> r Get key assignments { 0x0041, {key '1'}, 0x00, {key '2'} ... {key '0'}, 0,0,0, {symbols}, 0 }<br /> where {key '0'} =&gt; ' ', '0'<br /> s Press key { 0x0042, press: 0x01; release: 0x02, button, 0x01 }<br /> where button: 0x01 - 0x09: 1-9<br /> 0x0a: 0<br /> 0x0b: #<br /> 0x0c: *<br /> 0x0d: Power<br /> 0x0e: Pick up phone<br /> 0x0f: Hang<br /> 0x10: Volume +<br /> 0x11: Volume -<br /> 0x17: Up<br /> 0x18: Down<br /> 0x19: Menu<br /> 0x1a: Names<br /> r Press key ack { 0x0043, press/release/error(0x05) }<br /> s ??? { 0x0044 }<br /> r ??? ack { 0x0045, 0x01 }<br />0x0d: Status<br /> r Display { 0x0050, 0x01, y, x, len, "string"(unicode) }<br /> s Status request { 0x0051 }<br /> r Status { 0x0052, no. of byte pairs, {byte pair} }<br /> where {byte pair}: {cmd, 1 <img src="redface.gif" border="0"> ff 2 <img src="redface.gif" border="0"> n}<br /> cmd: 1: call in progress<br /> 2: ???<br /> 3: have unread sms<br /> 4: voice call active<br /> 5: fax call active<br /> 6: data call active<br /> 7: key lock active<br /> 8: is SMS storage full<br /> s Display status { 0x0053, 1 <img src="redface.gif" border="0"> n 2 <img src="redface.gif" border="0"> ff }<br /> (will send displayed messages with x,y coordinates)<br /> r Display status ack { 0x0054, 1 }<br />0x11: Phone clock & alarm<br /> s set date and time { 0x0060, 1,1,7,yearh,yearl,month,mday,hour,min,0x00 }<br /> r date and time set { 0x0061 }<br /> s get date and time { 0x0062 }<br /> r date and time recvd { 0x0063,?,?,?,?,yearh,yearl,month,mday,hour,min,sec ond }<br /> s set alarm { 0x006b, 1,32,3,0x02(on-off),hour,min,0x00 }<br /> r alarm set { 0x006c }<br /> s get alarm { 0x006d }<br /> r alarm received { 0x006e,?,?,?,?,alrm(==2 <img src="redface.gif" border="0"> n),hour,min }<br />0x12: Connect to NBS port (61xx only ?)<br /> s Send {+0x0c, 0x01, UDH header, data}<br /> (without 0,1 header -- for oplogo, cli, ringtone etc upload)<br /> where: UDH header = 0x06, 0x05, 0x04,destporth,destportl,srcporth,srcportl<br />0x13: Calendar notes<br /> s Write calendar note { 0x0064, 0x01, 0x10, length, type, yearH, yearL, month, day, hour, timezone,<br /> alarm?(alarm yearH, yearL, month, day, hour, timezone): (0,0,0,0,0,0),<br /> textlen, "text" }<br /> r Write cal.note report { 0x0065, return }<br /> where return: 0x01: ok<br /> 0x73: failure<br /> s Calendar notes set { 0x0066... }<br /> r Calendar note recvd { 0x0067, 0x01, ?, length, type, yrH,yrL,mon,day,hr,tz,alrm yrH,yrL,mon,day,hr,tz,textlen, "text" }<br /> r Cal.note recvd error { 0x0067, err }<br /> where err: 0x93: not available<br /> (0x01: OK)<br /> other: error<br /> s Delete cal.note { 0x0068, location }<br /> r Del. cal.note report { 0x0069, err }<br /> where err: 0x01: OK<br /> 0x93: cannot delete<br />0x14: SMS funcs<br /> s Write SMS to SIM { 0x0004, .... }<br /> r SMS message frame rcv { 0x0008,subtype,?,num,?,BCD(smscenter)...} 20-&gt;type, 22-&gt;status<br /> where type: 0x06: delivery report <br /> status: 0x00: delivered<br /> 0x30: pending<br /> 0x46: failed<br /> 0x09: reading failed<br /> subtype: 0x02: invalid mem type<br /> 0x07: empty SMS location<br /> s Delete SMS message { 0x000a, 0x02, location }<br /> r Delete OK { 0x000b }<br /> s SMS status request { 0x0036, 0x64 }<br /> r SMS status { 0x0037,?,?,?,?,?,?,msgnumber,unread }<br /> r SMS status error { 0x0038 }<br />0x40: Security commands<br /> s Enable extended cmds { 0x0164, cmd }<br /> where cmd: 0x00: off<br /> 0x01: on<br /> 0x03: reset (doesn't ask for PIN again)<br /> 0x04: reset (PIN is requested)<br /> In 5110 makes reset without PIN<br /> 0x06: CONTACT SERVICE!!! Don't try it!<br /> s Get IMEI { 0x0166 }<br /> r Get IMEI { 0x0166, 0x01, IMEI, 0x00}<br /> s Get Product Profile<br /> Settings { 0x016a}<br /> r Get Product Profile<br /> Settings { 0x016a, 4bytes with Product Profile Settings }<br /> s Set Product Profile<br /> Settings { 0x016b, 4bytes with Product Profile Settings }<br /> r Set Product Profile<br /> Settings OK ? { 0x016b }<br /> s Get code { 0x016e, code }<br /> where code: see 0x08/0x0004 (only sec.code is allowed)<br /> r Get code { 0x016e, code, allowed, allowed? (sec code (text)) }<br /> where code: see 0x08/0x0004<br /> allowed: 0: no<br /> 1: yes<br /> s Reset Permanent<br /> Counters (nm-&gt;test36) { 0x0174, 0x01, 0x01, 0x0e }<br /> r Reset Permanent<br /> Counters (nm-&gt;test36) { 0x0174 }<br /> s Netmonitor { 0x017e, field }<br /> where: field: 00: next<br /> F0: reset<br /> F1: off<br /> F2: field test menus<br /> F3: developer menus<br /> s Get simlock info { 0x018a, 0x00}<br /> r Get simlock info { 0x018a, 0x00, ... }<br /> warning! it's possible, that using it in some phones<br /> can close simlocks !<br /> s Set downloaded OpName { 0x018b, 0x00, MCC1, MCC2, MNC, Name, 0x00 }<br /> r SetdownloadedOpNameOK?{ 0x018b, 0x00, 0x01 }<br /> s Get downloaded OpName { 0x018c, 0x00 }<br /> r Get downloaded OpName { 0x018c, 0x00, 0x01, MCC1, MCC2, MNC, Name, 0x00,...}<br /> s Buzzer pitch { 0x018f, volume, hzLO, hzHI }<br /> if volume and hz is 0, it's off<br /> r Buzzer pitch { 0x018f}<br /> s Get bin ringtone { 0x019e, location }<br /> where: location=0,1,etc.<br /> r Get bin ringtone { 0x019e, location, error, contents... }<br /> where location=0,1,etc.<br /> error=0x0a, ringtone NOT available<br /> 0x00, OK<br /> s Set bin ringtone { 0x01a0, location, 0x00, contenst... }<br /> where: location=0,1,etc.<br /> r Set bin ringtone { 0x019e, location, error }<br /> where location=0,1,etc.<br /> error=0x0a, ringtone NOT set<br /> 0x00, ringtone set OK<br /> s Get info about phone { 0x01c8, 0x01 }<br /> r Get info about phone { 0x01c8, 0x01, 0x00, "V ", "firmware", 0x0a, "firmware date", 0x0a, "model", 0x0a, "(c) NMP.", 0x00 }<br /> s Get MCU SW Checksum { 0x01c8, 0x02 }<br /> r Get MCU SW Checksum { 0x01c8, 0x02, 0x00, checksum (4 bytes),0x00 }<br /> s DPS External SW { 0x01c7, 0x03 }<br /> r DSP External SW { 0x01c7, 0x03, 0x00, string,0x00 }<br /> s Get HW { 0x01c8, 0x05 }<br /> r Get HW { 0x01c8, 0x05, 0x00, HW version (4 bytes), 0x00 }<br /> s Get "Made" Date { 0x01c8, 0x05 }<br /> r Get "Made" Date { 0x01c8, 0x05, 0x00, date(4 bytes), 0x00 }<br /> s Get DSP Internal SW { 0x01c8, 0x09 }<br /> r Get DSP Internal SW { 0x01c8, 0x09, 0x00, version (1 bytes), 0x00 }<br /> s Get PCI version { 0x01c8, 0x0a }<br /> r Get PCI version { 0x01c8, 0x0a, 0x00, version, 0x00 }<br /> s Get system ASIC { 0x01c8, 0x0c }<br /> r Get system ASIC { 0x01c8, 0x0c, 0x00, string, 0x00 }<br /> s Get COBBA { 0x01c8, 0x0d }<br /> r Get COBBA { 0x01c8, 0x0d, 0x00, string, 0x00 }<br /> s Get PLUSSA { 0x01c8, 0x0e }<br /> r Get PLUSSA { 0x01c8, 0x0e, available, 0x00 }<br /> where available: 0x01: not available<br /> s Get CCONT { 0x01c8, 0x0f }<br /> r Get CCONT { 0x01c8, 0x0f, available, 0x00 }<br /> where available: 0x01: not available<br /> s Get PPM version { 0x01c8, 0x10 }<br /> r Get PPM version { 0x01c8, 0x10, 0x00, "V ", "firmware", 0x0a, "firmware date", 0x0a, "model", 0x0a, "(c) NMP.", 0x00 }<br /> s Get PPM info { 0x01c8, 0x12 }<br /> r Get PPM info { 0x01c8, 0x12, 0x00, PPM version ("B", "C", etc.), 0x00 }<br /> s Set HW version { 0x01c9, 0x05, version, 0x00 }<br /> s Get Product Code { 0x01ca, 0x01 }<br /> r Get Product Code { 0x01ca, 0x01, 0x00, number, 0x00 }<br /> s Get Order Number { 0x01ca, 0x02 }<br /> r Get Order Number { 0x01ca, 0x02, 0x00, string, 0x00 }<br /> s Get Prod.Ser.Number { 0x01ca, 0x03 }<br /> r Get Prod.Ser.Number { 0x01ca, 0x03, 0x00, number, 0x00 }<br /> s Get Basic Prod.Code { 0x01ca, 0x04 }<br /> r Get Basic Prod.Code { 0x01ca, 0x04, 0x00, number, 0x00 }<br /> s Set Product Code { 0x01cb, 0x01, product code, 0x00 }<br /> s Set Order Number { 0x01cb, 0x02, number, 0x00 }<br /> s Set Prod.Ser.Number { 0x01cb, 0x03, number, 0x00 }<br /> s Get (original ?)IMEI { 0x01cc, 0x01 }<br /> r Get (original ?)IMEI { 0x01cc, 0x01, IMEI, 0x00 }<br /> s Get Manufacture Month { 0x01cc, 0x02 }<br /> r Get Manufacture Month { 0x01cc, 0x02, 0x00, string, 0x00 }<br /> s Get Purchare date { 0x01cc, 0x04 }<br /> r Get Purchare date { 0x01cc, 0x04, 0x00, string, 0x00 }<br /> s Set "Made" date { 0x01cd, 0x02, string, 0x00 }<br /> s Result of phone tests { 0x01cf }<br /> r Result of phone tests { 0x01cf, 0xff, results of next tests }<br /> s ??? { 0x01d1 }<br /> r ???(N5110) { 0x01d1, 0x00, 0x1d, 0x00, 0x01, 0x08, 0x00 }<br /> s LCD Test { 0x01d3, value }<br /> where value: 0x03, 0x02 - 1'st test<br /> 0x03, 0x01 - 2'nd test<br /> 0x02, 0x03 - clears screen<br />0x47:<br /> s Get Picture Image { 0x0001, location }<br /> r Get Picture Image when contains sender number<br /> { 0x0002, location, number(like in SMS), 0x00, len, text, 0x00, width, height, 0x01, bitmap }<br /> NOTE: Supports only 0x81 and 0x91 coding (NOT alphanumeric numbers!) in sender<br /> without sender number<br /> { 0x0002, location, 0x00, 0x00, 0x00, len, text, 0x00, width, height, 0x01, bitmap }<br /> s Set Picture Image { 0x0003, frame...}<br /> where frame: see 0x47/0x0002<br /> r Get/Set PictureImageOK{ 0x0004 }<br /> r Set Picture Image err { 0x0005, error? }<br /> where error=0x74 - wrong location ?<br />0x64:<br /> s Phone ID request { 0x0010 }<br /> r Phone ID recvd { 0x0011, "NOKIA", "imei", 0, "model", 0, "prod.code", 0, "HW", 0, "firmware", magic bytes x 4 ... }<br /> s Accessory connection { 0x0012, 16x0x00, 'NOKIA&NOKIA accessory', 3x0x00 } (45 bytes)<br />0x7f: Acknowledge(FBUS/IRDA){+type, seq }<br /> Acknowledge(MBUS)...<br />0xd0: <br /> s Power on message seq1 {+04 }<br /> r Power on message seq1 {+05 }<br />0xd1:<br /> s Get HW&SW version { 0x0003, 0x00 }<br />0xd2:<br /> r Get HW&SW version { 0x0003 "V " "firmware\n" "firmware date\n"<br /> "model\n" "(c) NMP." }<br />0xf4: Power on message seq 2

To all persons interested in add lenguajes and update MCU+PPM in Nokia phones.

[XzZ]

Spy Or Listen Wintesla Or Other Soft.!<br /> <img src="wink.gif" border="0"> <br />Note:More Good Hardware Listen Stil<br />If you can soft listen same good but not more <img src="wink.gif" border="0">

[43e08]

I don´t know. I only see the document ,copy this document and post here.

Sorry for my bad English.

For all person interested in add lenguajes and update software for free in Nokia Phones.