The Gadget Link

Having trouble with your Nokia Phone? Nokia service technicians use the following codes to test their Nokia phones. Now you’ll be able to do the same thing. Please note: these universal test codes are to be used at your own risk.

Here they are! Enjoy.

1. *3370# Activate Enhanced Full Rate Codec (EFR) - Your phone uses the best sound quality but talk time is reduced my approx. 5%
2. #3370# Deactivate Enhanced Full Rate Codec (EFR) OR *3370# ( Favourite )
3. *#4720# Activate Half Rate Codec - Your phone uses a lower quality sound but you should gain approx 30% more Talk Time
4. *#4720# Deactivate Half Rate Codec
5. *#0000# Displays your phones software version, 1st Line : Software Version, 2nd Line : Software Release Date, 3rd Line : Compression Type. ( Favourite )
6. *#9999# Phones software version if *#0000# does not work
7. *#06# For checking the International Mobile Equipment Identity (IMEI Number). ( Favourite )
8. #pw+1234567890+1# Provider Lock Status. (use the “*” button to obtain the “p,w”and “+” symbols)
9. #pw+1234567890+2# Network Lock Status. (use the “*” button to obtain the “p,w”and “+” symbols)
10. #pw+1234567890+3# Country Lock Status. (use the “*” button to obtain the “p,w”and “+” symbols)
11. #pw+1234567890+4# SIM Card Lock Status. (use the “*” button to obtain the “p,w”and “+” symbols)
12. *#147# (vodafone) this lets you know who called you last
13. *#1471# Last call (Only vodofone)
14. *#21# Allows you to check the number that “All Calls” are diverted to
15. *#2640# Displays security code in use
16. *#30# Lets you see the private number
17. *#43# Allows you to check the “Call Waiting” status of your phone
18. *#61# Allows you to check the number that “On No Reply” calls are diverted to
19. *#62# Allows you to check the number that “Divert If Unreachable (no service)” calls are diverted to
20. *#67# Allows you to check the number that “On Busy Calls” are diverted to
21. *#67705646# Removes operator logo on 3310 & 3330
22. *#73# Reset phone timers and game scores
23. *#746025625# Displays the SIM Clock status, if your phone supports this power saving feature “SIM Clock Stop Allowed”, it means you will get the best standby time possible
24. *#7760# Manufactures code
25. *#7780# Restore factory settings
26. *#8110# Software version for the nokia 8110
27. *#92702689# Displays - 1.Serial Number, 2.Date Made, 3.Purchase Date, 4.Date of last repair (0000 for no repairs), 5.Transfer User Data. To exit this mode you need to switch your phone off then on again. ( Favourite )
28. *#94870345123456789# Deactivate the PWM-Mem
29. **21*number# Turn on “All Calls” diverting to the phone number entered
30. **61*number# Turn on “No Reply” diverting to the phone number entered
31. **67*number# Turn on “On Busy” diverting to the phone number entered
32. 12345 This is the default security code
33. press and hold # Lets you switch between lines
34. *#92702689#*3370# Warranty details
35. #3370# Basically increases the quality of calling sound, but decreases battery length
36. *#0000# Deactivates the above

Shows your software version

1. *#746025625#This shows if your phone will allow sim clock stoppage
2. *4370#

Half Rate Codec activation (It will automatically restart)

1. #4370# Half Rate Codec deactivation. It will automatically restart

Restore Factory Settings

1. *#7780#

Manufacturer Info

1. *#3283# Date of Manufacturing

If you enjoyed this post, make sure to subscribe to our rss feed!

Warning!!! The following steps are for your reference only; it is possible that you may break your iPhone using this tutorial. YOU ARE WARNED. (The following steps are from the hard work of George Hotz; who’s recently been seen on CNN).

Okay onwards to the actual step. Remove the black part, the three screws, and the aluminum case. Disconnect the wire connecting the phone to the case. Do not remove anything else. (Click on the pictures to see the enlarged photo)

STEP 2: Remove the metal cover over the comm board. This is all the disassembly you have to do. If you feel like being safe, desolder the battery red lead. Not necessary.

STEP 3: The red line is covering the A17 trace. In order to trick the chip into thinking the flash is erased in the correct section, you will need to pull this high. Scrape away at the trace with something like a multimeter probe. Then solder a very thin wire to it. Be very careful. Only scrape away at that solder mask above that one trace. YOU DO NOT WANT TO BREAK THE TRACE. This is the hardest step in the whole process; the rest is cake. Also solder a wire to the 1.8v line. Connect to wire coming from the trace and the wire coming from the 1.8v to your unlock switch. Be careful, you only get one chance to do this right.

STEP 3(completed): Hopefully yours will look like this.

STEP 3(zoom-in): This is the zoomed in of the previous photo

STEP 4: Ok, time to test what you just soldered. First use the continuity check on a multimeter to make sure the wires aren’t shorting to ground or to each other. Make sure your switch is in the off position. Power up your iPhone. Hopefully it didn’t smoke Now go into minicom to tty.baseband and send a few commands, AT a few times will do. It should respond OK. Now flip your switch, the baseband should stop responding. Even when you flip it back, the baseband still shouldn’t respond. Be sure your switch is off, then open another ssh and run “bbupdater -v” You can get bbupdater off the ramdisk. This should reset the baseband, and minicom should start working again. If it did this, your soldering is most likely good, and you are ready to actually start unlocking your phone!!!

STEP 5: If it passed the checks in step 4, congratulate yourself. You are a pro solderer. Go eat lunch. If not, don’t worry yet. I must’ve thought I bricked my phone 100 times. First of all, to power up your phone you don’t need to reconnect the case with the power button. Just connect it with USB, it’ll power itself up. Secondly, don’t waste time compiling minicom. Download the binary here, and termcap here.

STEP 6: Now, with the switch taken off, your baseband should be working perfectly. Here you should take a NOR dump of your phone. The dev team’s NORDumper is a great way to do this. This is good to have in case something goes wrong. You can extract the firmware from this as well, which we’ll get to later.

STEP 7: So here is the first tool release, iEraser. This erases the current firmware on your modem. Don’t worry, you can always put it back with bbupdater. Here how the bootrom check works; it reads from 0xA0000030 0xA000A5A0 0xA0015C58 0xA0017370 and all these addresses must read as blank, or 0xFFFFFFFF. When you erase flash, it becoms 0xFFFFFFFF. But you can’t erase those locations, because they are in the bootloader. So thats where the testpoint comes in. Pulling A17 high hardware OR’s the address bus with 0×00040000(offset one because data bus is 16 bit) So the bootrom instead checks locations 0xA0040030 0xA004A5A0 0xA0045C58 0xA0047370, which are in the main firmware and can be erased. Pretty genius
To use this tool, you need the secpack from your modems version. The erase of this section is protected. Check the modem version in Settings->About. It’ll either be 3.12(1.0) or 3.14(1.0.1 and 1.0.2). You need the ramdisk which cooresponds to your version. Then go into “/usr/local/standalone/firmware” and get the ICE*.fls file. Extract 0×1a4-0×9a4 and save it in a file called secpack and place it in the same directory as the ieraser tool. Run ieraser. This should erase the modem firmware and leave you one more step on your way to unlocking.

STEP 8: Now its time to patch the firmware. Thanks to gray for finding these patches, this required some very complicated reversing. First, you need to extract the firmware from your nor dump. The range you need is 0×20000-0×304000. Save this file as “nor”. The patches you need to apply are as follows. These are offsets from the begininning of the file to saved as “nor”. Choose your version, and patch.
3.12: (213740): 04 00 a0 e1 -> 00 00 a0 e3
3.14: (215148): 04 00 a0 e1 -> 00 00 a0 e3
Resave the file nor, you’ll need it soon…

STEP 9: The final tool is iUnlocker. This tool uploads a small program, “testcode.bb”, to the baseband using the bootrom exploit. This program needs to be in a dir with “nor”, the file you obtained in the last step. You need to have the switch on when running this program. This will download and run the code in “testcode.bb” Then the program will stop and ask to to turn off the switch. Do so. You type any character then hit enter. The nor download starts right away. When the counter reaches 0×2E4000, it is done. Run “bbupdater -v”. Hopefully it will return the xgendata. If is does, the nor upload was successful.

STEP 10 (FINAL STEP!!) minicom into /dev/tty.baseband. If you already used up your attempt counter, the phone should already be unlocked. If not just run ‘AT+CLCK=”PN”,0,”00000000″. That will unlock the phone for sure. Run ‘AT+CLCK=”PN”,2′. It should finally return 0!!!
Your phone is now unlocked. Exit minicom and copy the CommCenter plist back to its place. Reboot. iASign. And enjoy your unlocked iPhone.

Here is the following Video from TV documenting the success for the previous unlocking steps!!

If you enjoyed this post, make sure to subscribe to our rss feed!

After the reveal of the new 8gb version of the N95, Nokia now reveals a variety of add-on products generally intended for the Nokia N-series mobiles. The new devices are both stylish and functioning.

The Nokia Bluetooth GPS Module LD-4W is compatible with a majority of Nokia devices and has up to 10 hours of battery usage. The unit is designed with a LED indicator for the GPS navigation, power and battery status as well as a Bluetooth connectivity status. The LD-4W is said to be priced at $250 CDN.

The Nokia Bluetooth Headset BH-903 is a stereo headset that is compatible with devices that support A2DP, AVRCP, PBAP, HFP and HSP profiles. The remote that comes along with the headset is designed with an OLED display and is capable to play for 15 hours of continuous talk/music time. Alike typical Bluetooth headsets, The Nokia BH-903 will switch automatically to talk mode when there is an incoming call and will return to music player mode right after th call. This high quality headset will cost $400 CDN.

Another Nokia improvement is the BH-902. This OLED display enhanced audio Bluetooth headset has integrated Digital Signal Processing (DSP) which helps provide greater sound quality. It weighs only 18.2 g and displays the incoming calls at the side of the unit. Currently Nokia has not provided solid information on the talk/stand by time however it is said to be $230 CDN

All these Nokia accessories will be available to everyone starting the fourth quarter of 2007.

The last but not least new gadget Nokia have in-store for us is the 500 Auto Navigation car kit solution. This is the first hands-free dedicated personal navigation device for communication and in0car navigation from Nokia. It provide turn-by-turn direction via spoken aid and features Bluetooth hands-free connectivity for your mobile. It boast a 4.3 inch wide color screen with pre-installed maps and travel information including points of interest such as hotels, malls, gas stations, etc…

Traffic Message Channel Service is said to be inclusive with this navigational system to provide drivers up to the minute traffic jams. It also comes standard with it music and video player plus a picture browser and a built-in FM transmitter which can transmit streaming audio to your in-dash FM radio!

If you enjoyed this post, make sure to subscribe to our rss feed!