Y3N

Bluetooth can be turned on/off by pressing the * key on some Eseries devices like the Nokia E66 and Nokia E71. This shortcut is not available on the Nseries phones. By hacking your Nseries S60 phone, there’s a patch that lets you change the ‘0? shortcut that usually opens the web browser. I’ve changed it to open the bluetooth menu on my Nokia N95 8GB. By turning on bluetooth only when you need it, you can save battery life and prevent unwanted file transfers.

Prerequsites

The first thing you need is a hacked Nokia S60 phone. You can find out how to do this by reading How To Hack Your S60 Phone guide.

The instructions below include editing the original ChangeBrowserOnKey.rmp patch by FCA00000 and uploading it to your phone. The modified code is then shown afterwards for the bluetooth shortcut. If you don’t want to read about the modification, just scroll all the way down for the end result. Note: The code’s formatting might not appear properly on RSS readers.

All I did was change the code so that the bluetooth menu opens. You can change it to anything you want as long as you know the application’s UID code.
Original Code by FCA0000

Below is the original code from FCA00000. Unmodified, pressing 0 will open Opera Mini if you have that installed. Continue reading below to change it to bluetooth instead. Notice that lines starting with ‘;’ are comments.

01.; *** ChangeBrowserOnKey0 1.0 ***
02.; *** Change Browser On Key ‘0′ ***
03.; Author: fca00000 , fca00000-at-yahoo-dot-es
04.; Date: 2008.06.01
05.; Firmware: tested on N80 v 5.0719.02 . Might work on preFP1+FP1
06.;
07.; When phone is in the StandBy screen, pressing key ‘0′ opens the default browser.
08.; With this patch, you can open any other application.
09.; You need to know its UID. Then, swap bytes to little-indian to get xxDIUxxx. In other words: 0×12345678 becomes 78563412
10.; For example:
11.; FExplorer UID = 0xE00012DF therefore xxDIUxxx=DF1200E0
12.; Calculator UID = 0×10005902 therefore xxDIUxxx=02590010
13.; OperaMini UID = 0×101D3166 therefore xxDIUxxx=66311D10 In this case, be aware that it takes some time (5 seconds) to open.
14.;
15.; then, the patch becomes:
16.; SnR:sys\bin\phone.exe:398D00100000000000000000:xxDIUxxx0000000000000000
17.; SnR:sys\bin\phone.exe:398D00100100000035000000:xxDIUxxx0100000035000000
18.; As far as I know, nothing is broken. But I decline all responsability, of course.
19.; Anyway, here it is. Enjoy
20.; end of ChangeBrowserOnKey0
21.SnR:sys\bin\phone.exe:398D00100000000000000000:66311D100000000000000000
22.SnR:sys\bin\phone.exe:398D00100100000035000000:66311D100100000035000000
Modified Code For Bluetooth

Below is the code for bluetooth shortcut. Since the The UID for bluetooth menu is 10005951, convert it to little-endian which results in 51590010. See how the conversion is done? You convert ABCDEFGH to GHEFCDAB. The only modifications done are in the last two lines of the original code.

1.; *** Change Browser On Key ‘0′ to Bluetooth ***
2.SnR:sys\bin
\phone.exe:398D00100000000000000000:515900100000000000000000
3.SnR:sys\bin
\phone.exe:398D00100100000035000000:515900100100000035000000

* Copy and paste this code to a new text file and make sure to save it with a .rmp extension.
* Transfer it over to the E:/patches folder. Create it if it is not already there.
* Enable it on ROMPatcher (see: How to Hack Nseries phones) and set it to autorun so you won’t need to reactivate it after reboot.

* Install freeware X-plore, a file manager from Lonely Cat Games. Run X-Plore, press 0 and check first 4 boxes. Don’t exit.
* Install and run HelloCarbide by FCA00000.
* Switch to X-plore and check if you can see the contents of C:/sys/. If you can, then you are halfway done. If not, try step 2 again.
* Download CapsOnOff.rar by FCA00000.
* Copy CProfDriver_SISX.ldd from RAR downloaded above into C:\sys\bin of your phone. You can do this with X-Plore.
* Install CapsOn.sisx and CapsOff.sisx. Run CapsOff application to turn on the hack.
* Download SIS installer mod for Symbian 9.2 and copy installserver.exe file to c:\sys\bin\ so you can install unsigned applications
* Install ROMPatcher by Zorn.
* Whenever you need to install an unsigned application or patch your phone, just run the CapsOff application first. CapsOn brings it back to normal state.

If you’ve forgot Security code of your Nokia mobile phone, use Security Mastercode instead.

Get Nokia Master Code Now!

1. Make sure PIN code is closed, or the Magic dual sim card can’t work properly (for SIM card rejected)
2. When use the dual sim card, please handle the function after mobile finish reading messages and phone book , so that Magic sim card works properly .( For example, when you operate the computer , if you operate other function while unfinished the program, the computer will be halt , the same as the Magic dual sim card. )
3. When switch on line for NOKIA mobiles, it will appear “whether updating SIM card”, please press “cancel”, it will switch automatically. (You can try to dial other mobiles to check whether it’s normal to switch. please try many times for the different characteristic)
4. Switch numbers with NOKIA and MOTO mobiles, the mobile will show “please inset SIM card.” it will be ok after a minute
5. When you can’t find SIM card after inserted into mobile, please add a sponge to make the magic sim card more tightly. Or you can use the ball pen to prick the 12 small bulgy spots, increase the thickness, in order to make contact well.
6. If your sim card is no signal while using Magic dual sim card, (16th) it will cause not to switch number on line, only save this two numbers in phonebook.
For example: Input “001” , then press “ save” key , it will switch to sim1
Input “002” , then press “ save” key , it will switch to sim2
7. Using Magic sim card, if the sim card rejected, maybe it is without good cutting, please check the bulgy spots and adjust the position or clean the sheet copper of the dual sim card.
When the chip is on top of the sim card , you can use a cutter; when the chip is in the middle of the sim card , we suggest you’d better use scissors.
8. When use dual sim card, if mobile ask for “insert sim card”, please change the position of two sim card and make sure a good contact between sim card, dual sim card and mobile.

Nokia All Codes

Scroll Down to view Specific Model Numbers!!!!

*** WARNING: Using secret codes may be harmful to your phone and result in disabling or worse. Use these codes at your own discretion, we accept no responsiblility for blocked pones while using these codes!!!
IMEI Number
*#06# Cells Identity Code (IMEI = International Mobile Equipment Identity)
XXXXXX XX XXXXXX X
TAC FAC SNR SP
TAC = Type Approval Code (first 2 digits = country code of the approval-country )
FAC = Final Assembly Code: (01,02 = AEG)
(10,20 Nokia)
(40,41,44 Siemens)
(30 Ericsson)
(50 Bosch)
(51 Sony,Siemens,Ericsson)
(60 Alcatel)
(65 AEG)
(70 Sagem)
(75 Dancall)
(80 Philips)
(85 Panasonic)
SNR = Serial Nr.
SP = Spare (always “0″)

Software Version
*#0000# shows the software version
Signal Processing
*3370# - Enchanced full Rate Codec (EFR) activation. It will automatically restart.
#3370# - Enchanced full Rate Codec (EFR) deactivation
*4720# - Half Rate Codec activation. It will automatically restart.
#4720# - Half Rate Codec deactivation
Enchanced Full Rate will give you much better sound quality when you enable it. The new Enhanced Full Rate CODEC adopted by GSM uses the ASELP (AlgebraicCode Excitation Linear Prediction) compression technology. This technology allows for much great voice quality in the same number of bits as the older Full Rate CODEC. The older technology was called LPC-RPE (Linear Prediction Coding with Regular Pulse Excitation). Both operate at 13 kilobits.(but you take up more space on the network, so they can charge you more) - Talk-time is reduced with about 5%

Sim Clock Stopping
*#746025625#
[*#sim0clock#]
Checks if the sim clock can be stopped. Sim clock stop is a kind of stand-by mode which will save battery time. This code doesn’t work with software version 4.59.
It will tell you if it can be stopped or not.

Warrenty Menu
*#92702689# takes you to a secret menu with 6 choices:
[*#war0anty#]
1. Displays Serial Number.
2. Displays the Month and Year of Manufacture (0997).
3. Displays (if there) the date where the phone was purchased (MMYY).
4. Displays the date of the last repairment - if found (0000).
5. Makes you capable of transferring user data if you have the gear for it.
6. Shows how long the phone has been used to talk. This counter is not reset by when you “clear timers” like the counters in the call register.

Bypass the SP lock With a Nokia 16xx/21xx/31xx/51xx/81xx
1. Insert SIM card of different provider.
2. Turn on the phone and press the UP VOLUME key for 3 sec.
Then release it and the phone says PIN CODE?
3. Press the “C” key.
4. Then Press * and wait until it disappears and appears again, then press * one more time and 04*PIN*PIN*PIN#

Nokia Speed Trap Detector Urban Legend spread by Nokia Engineers ;^)
The settings for radar speed traps detector. Your Nokia cell phone can be programmed to pick up radar speed traps, when programmed your cell phone picks up the radar and alerts you on the message alert tone. ( Doesn’t work with Nokia 7110! )
1. Enter your menu
2. Select settings
3. Select security settings
4. Select closed user group
5. Select on
6. Enter 00000
7. Press ok
8. Clear back to normal, within a few seconds your phone will display a radar sign with five zero’s next to it. It is now activated.
Unfortunately only Nokia phones have this function. The Cell Phone info display needs to be de-activated. Settings -> Phone Settings -> Cell Info display. Each time you turn off your phone, or even each time you loose contact with your carrier, you’ll have to activate it again… It is done using steps 1 through 5 above, but the number (00000) will be already on the field as a default.

The James Bond Trick

If you short-circuit the left middle and right pins on the bottom of the phone with all connections touching each other, the Nokia software hangs! The profile “Headset” will be activated. Before you do this just activate the “Automatic Answer” in the headset profile and set the ringing volume to “Mute”. Now you can use your phone for checking out what people are talking about in a room. Just place it under a table in a room and call it. The phone receives the call without ringing and you can listen to what people are saying! Network Monitor
There is a hidden menu inside your Nokia phone. If you want to activate it, you’ll have to re-program some chips inside of your phone.
Check your software version. You can only continue if you have v4.33, v4.73 or v5.24.
Take apart the phone.
De-solder the EEPROM (ATMEL AT 24C64)
Read out the data with an EEPROM programmer and save it to a file (Backup)
If you have v.33 or v4.73, change the address “03B8″ from “00″ to “FF”
If you have v5.24 then change the address “0378″ from “00″ to “FF”
Write the new data to the EEPROM and solder it back to the phone
Power on your phone and you should have “Netmonitor” enabled.
The Network Monitor gives you the following information:
Carrier number, MS RX Level in DBM, Received signal quality, MS TX power level, C1 (Path loss criterion, used for cell selection and reselection). The range is -99 to 99, RTL (Radio link timeout), Timeslot, Indication of the transmitter status, Information on the Network parameters, TMSI (Temporary Mobile Subscriber Identity), Cell identification (Cell ID, Number of cells being used), MCC (Mobile country code), MCN (Mobile network code), LAC (Location area code), Ciphering (On/Off), Hopping (On/Off), DTX (On/Off), Discard cell barred information.

Game Hacking with Blizzard

Get the file called the ‘BlizzardN-GAGE.SIS’ from IRC get in #mediaplace on Efnet (note: Downloading cracked/Hacked games is illegal unless you already own a copy of game)
The Blizzard Nokia N-Gage Installer.
1. Unpack Blizzard.sis file that you get from mIRC
2. Transfer the .sis file to your N-Gage
3. Get the .blz (N-gage ROM) from mIRC
4. copy the file to the root dir of your MMC (16MB MMC)Multimedia Card
5. Use the Blizzard application to unpack the .blz file
6. After unpacking the sonic icon should appeared in the MENU
7. Clicked sonic icon and it should work !

List of compatible games for the 3650,6600 and the N-gage that work:
[3650]
SonicN (v.2.5+)
Puyo Pop (v.2.5+)
[6600]
SonicN
Puyo Pop
Pandemonium
Tomb Raider
Super Monkey Ball
Tony Hawks Pro Skater
[N-Gage]
SonicN
Puyo Pop
Pandemonium
Tomb Raider
Super Monkey Ball
Tony Hawks Pro Skater
GSM Network Services Command Strings
When various network functions are selected via the cellphone’s menu using the keypad, the cellphone automatically generates the corresponding GSM network command string and transmits it to the network. These commands can however be manually entered via the keypad.

Each command is prefixed with either one or two * or # characters as follows:
** Register and Activate
* Activate
## De-Register (and Deactivate)
# Deactivate
*# Check Status
© Call button

Once each command has been entered, if it is a network command (as opposed to a local handset command) it must be transmitted to the network by pressing the YES (receiver) key which acts as an enter key - this is represented here with the © character. Always enter numbers in full international format +CountryAreaNumber ( e.g. +447712345678).
Command Description Command String
Security
Change call barring code **03*OldCode*NewCode*NewCode#©
Change call barring code **03*330*OldCode*NewCode*NewCode#©
Change PIN code **04*OldPIN*NewPIN*NewPIN#©
Change PIN2 code **042*OldPIN2*NewPIN2*NewPIN2#©
Unlock PIN code (when PIN is entered wrong 3 times) **05*PUK*NewPIN*NewPIN#©
Unlock PIN2 code (when PIN2 is entered wrong 3 times) **052*PUK2*NewPIN2*NewPIN2#©
Display IMEI *#06#
Call Forwarding (Diversions)
De-register all call diversions ##002#©
Set all configured call diversions to number and activate **004*number#©
De-register all configured call diversions (no answer, not reachable, busy) ##004#©
Unconditionally divert all calls to number and activate **21*number#©
Activate unconditionally divert all calls *21#©
De-register unconditionally divert all calls ##21#©
Deactivate unconditionally divert all calls #21#©
Check status of unconditionally divert all calls *#21#©
Divert on no answer to number and activate **61*number#©
Activate divert on no answer *61#©
De-register divert on no answer ##61#©
Deactivate divert on no answer #61#©
Check status of divert on no answer *#61#©
Divert on not reachable to number and activate **62*number#©
Activate divert on not reachable *62#©
De-register divert on not reachable ##62#©
Deactivate divert on not reachable #62#©
Check status of divert on not reachable *#62#©
Divert on busy to number and activate /td> **67*number#©<
Activate divert on busy *67#©
De-register divert on busy ##67#©
Deactivate divert on busy #67#©
Check status of divert on busy *#67#©
Change number of seconds of ringing for the given service before diverting a call (such as on no answer). Seconds must be a value from 5 to 30. De-registering the same divert will also delete this change! **service*number**seconds#© (Service numbers, see below)
Call barring
Activate barr all outgoing calls (see Security to set code) **33*code#©
Deactivate barr all outgoing calls #33*code#©
Check status of barr all outgoing calls *#33#©
Activate barr all calls **330*code#©
Deactivate barr all calls #330*code#©
Check status of barr all calls /td> *#330*code#©<
Activate barr all outgoing international calls **331*code#©
Deactivate barr all outgoing international calls #331*code#©
Check status of barr all outgoing international calls *#331#©
Activate barr all outgoing international calls except to home country **332*code#©
Deactivate barr all outgoing international calls except to home country #332*code#©
Check status of barr all outgoing international calls except to home country *#332#©
Activate barr all outgoing calls **333*code#©
Deactivate barr all outgoing calls #333*code#©
Check status of barr all outgoing calls *#333#©
Activate barr all incoming calls **35*code#©
Deactivate barr all incoming calls #35*code#©
Check status of barr all incoming calls *#35#©
Activate barr all incoming calls when roaming **351*code#©
Deactivate barr all incoming calls when roaming #351*code#©
Check status of barr all incoming calls when roaming *#351#©
Activate barr all incoming calls **353*code#©
Deactivate barr all incoming calls #353*code#©
Check status of barr all incoming calls *#353#©
Call waiting
Activate call waiting *43*#©
Deactivate call waiting #43##©
Check status of call waiting *#43#©
Calling Line Identification
The following only works if CLIP and CLIR are enabled (ask your service provider)
CLIP: Presentation of the number of the incoming call
Activate CLIP **30#©
Deactivate CLIP ##30#©
Check status of CLIP *#30#©
CLIR: Presentation of one’s own number to the to the called party
Activate CLIR **31#©
Activate CLIR for the actual call *31#number©
Deactivate CLIR ##31#©
Deactivate CLIR for the actual call #31#number©
Check status of CLIR *#31#©
COLP: Presentation of the actual number reached (if number called was diverted to another number
Activate COLP *76#©
Deactivate COLP #76#©
Check status of COLP *#76#©
COLR: Presentation of the original number called by the calling party (if the call was diverted to this cellphone)
Activate COLR *77#©
Deactivate COLR #77#©
Check status of COLR *#77#©

Cellphone Services
10 All types of cellphone services
11 Speech service
12 Data service
13 Fax
14 Datex-J
15 Teletex
16 Short message service (SMS)
18 All data services without SMS
19 All cellphone services without SMS

Carrier Services
20 All services
21 All asynchronous services
22 All synchronous services
23 3.1kHz services
24 Synchronous point-to-point connections including PAD’s (all synchronous data services)
25 Asynchronous point-to-point connections including PAD’s (all asynchronous data services)
26 Data packet sending including PAD’s (all synchronous data packet services)
27 Services with PAD-share
29 Digital connection with 12kbps

GSM Network Service Codes
Note that at present only the following service codes are in use:
11 Speech
13 fax
25 data

Cell Broadcast
While Short Message Service (SMS) can be configured as a personal service, Cell Broadcast is a general service which is designed for subscribers of a specific cell or topic. For example, a subscriber to cell 050 in England will receive information on the GSM tower currently being used by their phone. This new concept brings a whole new meaning to the term mobile communications as the phone is now able to receive information such as share prices or weather updates without the need of data cards and computers. At present the following message types exist (note: this may vary from carrier to carrier and some carriers may charge for this service):

Code Title
000 Index
010 Flashes
020 Hospitals
022 Doctors
024 Pharmacy
030 Long Distant Road Reports
032 Local Road Reports
034 Taxis
040 Weather
050 District
052 Network Information
054 Operator Services
056 Directory Inquiries (national)
057 Directory Inquiries (international)
058 Customer Care (national)
059 Customer Care (international)

In the future one will be able to control each individual call by use of the following service codes. To do this the user has to insert the service code in front of the last # in the MMI command above.

Or More

Secret Codes for some Nokia models
Nokia 9000/9000i

To view IMEI number *#06#
To view Software Version enter *#8110# Latest Version is under Phone Info.
To view Week and Year of manufacture enter *#3283#

Nokia 9110

*#06# for checking the IMEI (International Mobile Equipment Identity)
*#0000# shows the SW version.

Latest software version: v5.02 (26-08-99)RAE-2

Nokia 7110

*#06# for checking the IMEI (International Mobile Equipment Identity)
*#0000# To view Software Version.
*#3370# - Enhanced Full Rate Codec (EFR) activation. It will automatically restart.
*#3370* - Enhanced Full Rate Codec (EFR) deactivation. It will automatically restart.
*#4720# - Half Rate Codec activation. It will automatically restart
*#4720* - Half Rate Codec deactivation. It will automatically restart
*#746025625# - Sim clock allowed status.
*#92702689# [*#war0anty#] - takes you to a secret menu with 6 choices:

1. Displays Serial Number.
2. Displays the Month and Year of Manufacture (0997)
3. Displays (if there) the date where the phone was purchased (MMYY)
4. Displays the date of the last repairment - if found (0000)
5. makes you capebel of transferring user data if you have the gear for it
6. shows how many hours the phone has been on

Latest software version: 4.77 25-01-00 NSE-5 - EFR and half rate codes do not work with these version.

V 4.76 13-01-00 NSE-5
V 4.75 07-01-00 NSE-5
V 4.73 15.11.99 NSE-5

Nokia 6190

*#06# for checking the IMEI (International Mobile Equipment Identity)
*#6190# shows the SW version.
*#92772689# (after removing the analog module) shows service menu.
*3001#12345[OK] to enter test mode.
*#639# to change NAM.

Nokia 3810

To view IMEI number *#06#
To view Software Version enter *#3810#

Nokia 6120 / 6160 / 6162 (TDMA phones)

*#92772689# for checking ISDN number.
*3001#12345# for field test mode and nam selection and some other stuff…
*#9999# shows the SW version

Nokia 3210 Secret Codes
Nokia 3210

*#06# for checking the IMEI (International Mobile Equipment Identity) Information you get from the IMEI:

XXXXXX XX XXXXXX X

TAC FAC SNR SP

TAC = Type approval code
FAC = Final assembly code
SNR = Serial number
SP = Spare

*#0000# To view Software Version.

#746025625# [*#sim0clock#]
Checks if the sim clock can be stopped. Sim clock stop is a kind of stand-by mode which will save battery time. This code doesn’t work with software version 4.59.

*#92702689# [*#war0anty#] takes you to a secret menu with 6 choices:

1. Displays Serial Number.
2. Displays the Month and Year of Manufacture (0997)
3. Displays (if there) the date where the phone was purchased (MMYY)
4. Displays the date of the last repairment - if found (0000)
5. makes you capebel of transferring user data if you have the gear for it
6. shows how many hours the phone has been on

Latest software version: V 5.02 NSE-8/9

*#3370# - Enhanced Full Rate Codec (EFR) activation. It will automatically restart.
*#3370* - Enhanced Full Rate Codec (EFR) deactivation. It will automatically restart.
*#4720# - Half Rate Codec activation. It will automatically restart
*#4720* - Half Rate Codec deactivation. It will automatically restart

Enhanced Full Rate will give you much better sound quality when you enable it. The new Enhanced Full Rate CODEC adopted by GSM uses the ASELP (Algebraic Code Excitation Linear Prediction) compression technology. This technology allows for much great voice quality in the same number of bits as the older Full Rate CODEC. The older technology was called LPC-RPE (Linear Prediction Coding with Regular Pulse Excitation). Both operate at 13 kilobits.(but you take up more space on the network, so they can charge you more) - Talk-time is reduced by about 5% when using the ERF option.