Philips FIZZ

Pinouts for Fizz and Spark

1 GROUND
2 GROUND
3 HANDS FREE ON/OFF
4 MUTE
5 TX
6 RX
7 RTS
8 REPROGRAMMING
9 ON HOOK CHARGER (APPROX 13V? TO 14V)
10 AUX MIC
11 AUX SPEAKER
12 GROUND
Philips DIGA
      

Philips GENIE

To view IMEI number *#06#
*#2254*#  is the statusregister: C, BS, RR, MMI, CREAT.
*#2255*# will activate and deactivate the "DEBUG CALL"-Mode
*#2558*# will display the time in days,hours and minutes you are connected to the GSM network

Secrets codes for Philips DIGA phones:
Blocking list *#3333*#
Time connected *#2558*#
Flags,something *#3377*#
Security code *#7489*#

Some background information about EEPROMS.

000 Check sum of 001 - 095
04D - 050 Security Code
0D0 Check sum of 0D1 - 0FD
0D1 - 0FD SP-LOCK AREA ! <<<<
0F0 - 0FD NCK Code ( in some versions of software)!!
100 - 1FF ?????????????
201 - 2FF Last Dialed Numbers
500 Check Sum of 501 - 515
506 - 50D IMEI open
50E - 515 IMEI scrambled
700 Check Sum of 701 - 7F5
701 - 7F5 ?????????????

Transporting 500 - 515 from one phone to another changes IMEI ,
without any problems.
Changing 0D0 - 0FD to CC 02 31 32 33 34 00 00 ......00
clears SP-Lock , but not in all sofware versions !!!
In some versions after change, some SIM cards says : Wrong IMSI,
other says Enter NCK Code.
After entering NCK code,
some phones changes Provider from one to another ,
BUT ONLY 1 TIME , and after that,
You need to restore EEPROM contens you saved the first time !!!!!!
Phone changes this locations within EEPROM:
045,05B - 060,0B2,0D0,0EC-0EF.

Software versions (see laser signature on FLASH amd28lv400t)
080012xx Not SP-Locked , after 0D0 - 0FD changing.
Not remembers last digits .
08001200 SP-Locked , NCK dont works.
08001510 SP-Locked , NCK works.
Changing FLASH 08001510 to 080012xx is possible,
but afterwards the microphone dont work.
Some changes in schematics ???
Changing FLASH 08001200 to 080012xx WORKS FINE !

NCK code is under address 0F0 - 0F3 like this : 31 33 37 30 ,
NCK will be 1370 .(in EEPROM 24c16).
But this procedure is one way , read EEPROM before making any changes in contents and save it !!!!

Because this phone is with diferent software versions, in other countries.
If You don't have original image of EEPROM,
You can't turn your phone to the original state anymore !!!
Therefor I advice You again;
SAVE IT FIRST !!!

For example You buy the phone from provider A,
phone works in network A with SIM-card from provider A.
Later you change to,
provider's B SIM card,
and phone asks for the NCK code.
You enter NCK code,
phone says "UNLOCKED" and works fine in network B with SIM-card from provider B.
Later You like to use SIM-CARD from provider A again,
phone registering and says "Invalid IMSI and Switching off".
And I don't know how turn it on again to work on provider A network,
phone never ask NCK code any more.
ONE WAY TO SOLVE THIS PROBLEM,
IS REPROGRAMMING EEPROM to ORIGINAL STATE !!!!!
and do some more experiments.
Thad's way we save eeprom contents at the first start !!!!!!
You lose waranties and other things.
I don't know how it will be with phones with another software version .
EEPROM you dont need to remove.
Just connect programmer in parallel, or desolder one side of chip (just 4 pins).
Use only : GND - pin4 , VCC- pin8 , SDA - pin5 , SCL - pin6 .
VCC use 3-4 V , because phone is 3V technology.
I work with 5v programmer and no problems,but who nows ???
Use 1N4818 diode in series of VCC for reducing voltage.
(If chip disconnected no problem with 5V).
Accu must be disconnected and SIM removed !!!
I solder 4 wires to chip,on other side 8-pin header for pulling it to programmer.
This way phone may be closed and You can insert SIM without problems and test the results of your
experiments

Secrets codes for Philips FIZZ phones:
IMEI code *#06#
SW info *#8377*#
Security code *#1234*#
Secrets codes for Philips SPARK phones:
IMEI: *#06#
Secrets codes for Philips GENIE phones:
*#06# IMEI number (International Mobile Equipment Identity)
*#2254*# Status register: C, BS, RR, MMI, CREAT.
*#2255*# activate and deactivate the "DEBUG CALL"-Mode; when activated,
make a call to a busy line an the phone will disp some hex-codes on the disp.
*#2558*# the time in days,hours and minutes you are connected to the net
*#2562*# not clear; the phone reconnects to the net
*#2565*# not clear; warmstart ?
*#3333*# (NO) BLOCKING - list (15 items)
*#2377*# "BEER": not clear, the phone waits a random time and reconnects
to the net, sometimes the phone makes a reset or something
*#3377*# Init, Flags, SIM LCK
*#3353*# resets the (NO) BLOCKING - list
*#7378*# Name, Length, SIM phase
*#7489*# SECURITY CODE
*#7693*# you can activate and deactivate the SLEEP MODE
(when deactivated the battery will go down!)
*#7787*# not clear: SPURIOUS INTERRUPT
*#7948*# SWITCH OFF: not clear; it is a timer or something
*#8463*# Some information about the SLEEP MODE: Wake, Sleep Req., Sleep
Philips Genie (TCD838)
Type *#2337*# and it will be activate the beep signal when the cellphone reconnected to the net.
Philips SAVVY DB
Solution for savvy new checked 100% works:
Address 0d00 reduce to one e.g. A8 to A7, address 0d4E set to 00.
PCK you can read from locations
0d46 0d47 0d48 0d49
(low nibble first e.g. for 06 14 77 36 PCK=60417763)