Protocol of the Communication between SIM and mobile phone

Transcription

1 Protocol of the Communication between SIM and mobile phone This protocol oft the layer 7 (application layer) and the layer 2 (data transmission layer) was made with an Siemens SL55 mobile phone in the TMobile GSM D1 network and the IT³Monitor from ORGA Test System. Some values are anonymisied by the character X Wolfgang Rankl, January 2004 Messages Type: Source: Info 0 ns Start testcase 'SL55' at 12/15/2003 3:58:09 PM Type: Info Source: Layer ms 372 clock cycles per bit are set. Type: Info Source: Layer ms Direct convention has been determined. Type: Info Source: Layer ms ETU factor has changed to 372. Layer 7 (Cold Reset) ms Event: Reset card interface s SELECT (GSM) ms SELECT response length 27

2 GSM (7F20) None s GSM STATUS (GSM) ms STATUS GSM (7F20) None s RFU bytes 12: Memory available: 0 bytes 7F20 Type of file: Dedicated file RFU bytes 812: FA FF AA FF 01 Length of following data: 14 bytes File characteristics: Clock stop: Allowed, no preferred level Min. freq. for GSM algorithm: 13/4 MHz Technology identification: 3V Technology SIM CHV1: Enabled DFs in current directory: 0 EFs in current directory: 26 Number of CHV and admin. codes: 6 RFU byte 18: 00 CHV1 status: False presentations remaining: 3 RFU bits 75: 000 Secret code: Initialised UNBLOCK CHV1 status: False presentations remaining: 10 RFU bits 75: 000 Secret code: Initialised CHV2 status: False presentations remaining: 3 RFU bits 75: 000 Secret code: Initialised UNBLOCK CHV2 status: False presentations remaining: 10 RFU bits 75: 000 Secret code: Initialised RFU byte 23: 00 Reserved for admin. management: SELECT (PHASE) ms SELECT response length 15 GSM (7F20) Phase identification (6FAE)

3 0.244 s Phase identification READ BINARY (Offset 0, Len 1) ms READ BINARY GSM (7F20) Phase identification (6FAE) s Offset: 0 Length: 1 SIM Phase: Phase 2 and PROFILE DOWNLOAD required SELECT (MF) ms SELECT response length 27 Master File (3F00) None s Master File SELECT (ELP) ms Command parameters/data: SELECT File ID not found Master File (3F00) None s ELP 2 bytes 2F 05 SELECT (GSM) ms SELECT response length 27 GSM (7F20) None s GSM SELECT (LP) ms SELECT

4 GSM (7F20) Language preference (6F05) s Language preference RFU bytes 12: File size: 4 bytes 6F05 Type of file: Elementary file Byte 8: RFU: 00 Access conditions: UPDATE: CHV1 READ / SEEK: ALWAYS RFU bits 41: 1111 INCREASE: NEVER INVALIDATE: NEVER REHABILITATE: NEVER File status: Invalidation status: File not invalidated Readable/updatable: Readable/updatable when invalidated RFU bits 84, 2: Length of following data: 2 bytes Structure: Transparent READ BINARY (Offset 0, Len 4) ms READ BINARY GSM (7F20) Language preference (6F05) s Offset: 0 Length: 4 Language Code 1: Language Code 2: Language Code 3: Language Code 4: German English French Dutch VERIFY CHV (CHV 1) s VERIFY CHV GSM (7F20) Language preference (6F05) s CHV No.: CHV 1 CHV value: Digits: 1202 Bytes 58: FF FF FF FF

5 STATUS (GSM) s STATUS GSM (7F20) Language preference (6F05) s RFU bytes 12: Memory available: 0 bytes 7F20 Type of file: Dedicated file RFU bytes 812: FA FF AA FF 01 Length of following data: 14 bytes File characteristics: Clock stop: Allowed, no preferred level Min. freq. for GSM algorithm: 13/4 MHz Technology identification: 3V Technology SIM CHV1: Enabled DFs in current directory: 0 EFs in current directory: 26 Number of CHV and admin. codes: 6 RFU byte 18: 00 CHV1 status: False presentations remaining: 3 RFU bits 75: 000 Secret code: Initialised UNBLOCK CHV1 status: False presentations remaining: 10 RFU bits 75: 000 Secret code: Initialised CHV2 status: False presentations remaining: 3 RFU bits 75: 000 Secret code: Initialised UNBLOCK CHV2 status: False presentations remaining: 10 RFU bits 75: 000 Secret code: Initialised RFU byte 23: 00 Reserved for admin. management: SELECT (PHASE) s SELECT response length 15 GSM (7F20) Phase identification (6FAE) s Phase identification READ BINARY (Offset 0, Len 1) s

6 READ BINARY GSM (7F20) Phase identification (6FAE) s Offset: 0 Length: 1 SIM Phase: Phase 2 and PROFILE DOWNLOAD required TERMINAL PROFILE () s First Byte (Download) Profile Download: SMSPP data download: Cell Broadcast data download: Menu selection: '9EXX' response code for SIM data download error: Timer expiration: USSD string data object supported in Call Control: Envelope Call Control always sent to the SIM during automatic redial mode: Second Byte (Other) Command result: Call Control by SIM: Cell identity included in Call Control by SIM: MO short message control by SIM: Handling of the alpha identifier according to subclause (GSM 11.14): UCS2 Entry supported: UCS2 Display supported: Display of the extension text: Third Byte (Proactive SIM) Proactive SIM: DISPLAY TEXT Proactive SIM: GET INKEY Proactive SIM: GET INPUT Proactive SIM: MORE TIME Proactive SIM: PLAY TONE Proactive SIM: POLL INTERVAL Proactive SIM: POLLING OFF Proactive SIM: REFRESH Fourth Byte (Proactive SIM) TERMINAL PROFILE Proactive SIM command pending response length 63 GSM (7F20) Phase identification (6FAE) s Facility supported by ME Facility supported by ME Facility supported by ME Facility supported by ME Facility supported by ME Facility supported by ME Facility supported by ME Facility not supported by ME Facility supported by ME Facility supported by ME Facility supported by ME Facility supported by ME Facility supported by ME Facility supported by ME Facility supported by ME Facility supported by ME Facility supported by ME Facility supported by ME Facility supported by ME Facility supported by ME Facility supported by ME Facility supported by ME Facility supported by ME Facility supported by ME

7 Proactive SIM: SELECT ITEM Facility supported by ME Proactive SIM: SEND SHORT Facility supported by ME MESSAGE Proactive SIM: SEND SS Facility supported by ME Proactive SIM: SEND USSD Facility supported by ME Proactive SIM: SET UP CALL Facility supported by ME Proactive SIM: SET UP MENU Facility supported by ME Proactive SIM: PROVIDE LOCAL Facility supported by ME INFORMATION (MCC, MNC, LAC, Cell ID & IMEI) Proactive SIM: PROVIDE LOCAL Facility supported by ME INFORMATION (NMR) Fifth byte (Event driven information) Proactive SIM: SET UP EVENT LIST Facility supported by ME Event: MT call Facility supported by ME Event: Call connected Facility supported by ME Event: Call disconnected Facility supported by ME Event: Location status Facility supported by ME Event: User activity Facility supported by ME Event: Idle screen available Facility supported by ME Event: Card reader status Facility not supported by ME Sixth byte (Event driven information extensions) Event: Language selection Event: Browser Termination Event: Data available Event: Channel status Bit 5 Bit 6 Bit 7 Bit 8 Seventh byte (Multiple card proactive commands) Proactive SIM: POWER ON CARD Proactive SIM: POWER OFF CARD Proactive SIM: PERFORM CARD APDU Proactive SIM: GET READER STATUS (Card reader status) Proactive SIM: GET READER STATUS (Card reader identifier) Bit 6 Bit 7 Bit 8 Eighth Byte (Proactive SIM) Proactive SIM: TIMER MANAGEMENT (start, stop) Proactive SIM: TIMER MANAGEMENT (get current value) Proactive SIM: PROVIDE LOCAL INFORMATION (date, time and time zone) Binary choice in GET INKEY SET UP IDLE MODE TEXT RUN AT COMMAND (i.e. class "b" is supported) 2nd alpha identifier in SET UP Facility supported by ME Facility supported by ME Facility supported by ME Facility supported by ME RFU RFU RFU RFU Facility not supported by ME Facility not supported by ME Facility not supported by ME Facility not supported by ME Facility not supported by ME RFU RFU RFU Facility supported by ME Facility supported by ME Facility supported by ME Facility supported by ME Facility supported by ME Facility not supported by ME Facility supported by ME

8 CALL 2nd capability configuration parameter (see 9.1.6, GSM 11.14) Ninth Byte Sustained DISPLAY TEXT SEND DTMF command Proactive SIM: PROVIDE LOCAL INFORMATION BCCH Channel List Proactive SIM: PROVIDE LOCAL INFORMATION (language) Proactive SIM: PROVIDE LOCAL INFORMATION (Timing Advance) Proactive SIM: LANGUAGE Facility supported by ME Facility supported by ME Facility supported by ME Facility supported by ME Facility supported by ME Facility supported by ME Facility supported by ME NOTIFICATION Proactive SIM: LAUNCH BROWSER Facility supported by ME Proactive SIM: PROVIDE LOCAL Facility not supported by ME INFORMATION (Display Parameters) Tenth byte (Soft keys support) Soft keys support for SELECT ITEM Facility not supported by ME Soft Keys support for SET UP Facility not supported by ME MENU Bit 3 RFU Bit 4 RFU Bit 5 RFU Bit 6 RFU Bit 7 RFU Bit 8 RFU Eleventh byte (Soft keys information) Maximum number of soft keys 0 available: Twelfth byte (Bearer Independent protocol supported bearers (class "e")) Proactive SIM: OPEN CHANNEL Facility supported by ME Proactive SIM: CLOSE CHANNEL Facility supported by ME Proactive SIM: RECEIVE DATA Facility supported by ME Proactive SIM: SEND DATA Facility supported by ME Proactive SIM: GET CHANNEL Facility supported by ME STATUS Bit 6 RFU Bit 7 RFU Bit 8 RFU Thirteenth byte (Bearer Independent protocol supported bearers (class "e")) CSD supported by ME: Facility supported by ME GPRS supported by ME Facility supported by ME Bit 3 RFU Bit 4 RFU Bit 5 RFU Number of channels supported by 1 ME: Fourteenth byte (Screen height) Number of characters supported 0 down the ME display Bit 6 RFU Bit 7 RFU

9 Screen Sizing Parameters Facility not supported by ME supported Fifteenth byte (Screen width) Number of characters supported 0 across the ME Variable size fonts Supported Facility not supported by ME Sixteenth byte (Screen effects) Display can be resized Facility not supported by ME Text Wrapping supported Facility not supported by ME Text Scrolling supported Facility not supported by ME Bit 4 RFU Bit 5 RFU Width reduction when in a menu 0 SELECT (SST) s SELECT Proactive SIM command pending response length 63 GSM (7F20) SIM service table (6F38) s SIM service table RFU bytes 12: File size: 10 bytes 6F38 Type of file: Elementary file Byte 8: RFU: 00 Access conditions: UPDATE: ADM 6 READ / SEEK: CHV1 RFU bits 41: 1111 INCREASE: NEVER INVALIDATE: NEVER REHABILITATE: NEVER File status: Invalidation status: File not invalidated Readable/updatable: Readable/updatable when invalidated RFU bits 84, 2: Length of following data: 2 bytes Structure: Transparent READ BINARY (Offset 0, Len 10) s READ BINARY Proactive SIM command pending response length 63 GSM (7F20) SIM service table (6F38) s

10 Offset: 0 Length: 10 Service no. 1: CHV1 disable function allocated / activated Service no. 2: Abbreviated Dialling Numbers (ADN) allocated / activated Service no. 3: Fixed Dialling Numbers (FDN) allocated / activated Service no. 4: Short Message Storage (SMS) allocated / activated Service no. 5: Advice of Charge (AoC) allocated / activated Service no. 6: Capability Configuration Parameters (CCP) allocated / activated Service no. 7: PLMN selector allocated / activated Service no. 8: RFU not allocated Service no. 9: MSISDN allocated / activated Service no. 10: Extension1 allocated / activated Service no. 11: Extension2 allocated / activated Service no. 12: SMS Parameters allocated / activated Service no. 13: Last Number Dialled (LND) allocated / activated Service no. 14: Cell Broadcast Message Identifier allocated / activated Service no. 15: Group Identifier Level 1 allocated / activated Service no. 16: Group Identifier Level 2 allocated / activated Service no. 17: Service Provider Name allocated / activated Service no. 18: Service Dialling Numbers (SDN) not allocated Service no. 19: Extension3 not allocated Service no. 20: RFU not allocated Service no. 21: VGCS Group Identifier List (EFvgcs and EFvgcss) not allocated Service no. 22: VBS Group Identifier List (EFvbs and EFvbss) not allocated Service no. 23: enhanced MultiLevel Precedence and Preemption Service not allocated Service no. 24: Automatic Answer for emlpp not allocated Service no. 25: Data download via SMSCB not allocated Service no. 26: Data download via SMSPP allocated / activated Service no. 27: Menu selection allocated / activated Service no. 28: Call control not allocated Service no. 29: Proactive SIM allocated / activated Service no. 30: Cell Broadcast Message Identifier Ranges allocated / activated Service no. 31: Barred Dialling Numbers (BDN) not allocated Service no. 32: Extension4 not allocated Service no. 33: Depersonalization Control Keys allocated / activated Service no. 34: Cooperative Network List allocated / activated Service no. 35: Short Message Status Reports not allocated Service no. 36: Network's indication of alerting in the MS not allocated Service no. 37: Mobile Originated Short Message control by SIM not allocated Service no. 38: GPRS allocated / activated Service no. 39: Image (IMG) not allocated Service no. 40: SoLSA (Support of Local Service Area) not allocated SELECT (DCK) s

11 SELECT Proactive SIM command pending response length 63 GSM (7F20) Depersonalization Control Keys (6F2C) s Depersonalization Control Keys RFU bytes 12: File size: 16 bytes 6F2C Type of file: Elementary file Byte 8: RFU: 00 Access conditions: UPDATE: CHV1 READ / SEEK: CHV1 RFU bits 41: 1111 INCREASE: NEVER INVALIDATE: NEVER REHABILITATE: NEVER File status: Invalidation status: File not invalidated Readable/updatable: Readable/updatable when invalidated RFU bits 84, 2: Length of following data: 2 bytes Structure: Transparent READ BINARY (Offset 0, Len 16) s READ BINARY Proactive SIM command pending response length 63 GSM (7F20) Depersonalization Control Keys (6F2C) s Offset: 0 Length: 16 Network Depersonalization control key: Network Subset Depersonalization control key: Network Service Provider Depersonalization control key: Network Corporate Depersonalization control key: empty empty empty empty SELECT (CNL) s SELECT Proactive SIM command pending response length 63

12 GSM (7F20) Cooperative Network List (6F32) s Cooperative Network List RFU bytes 12: File size: 60 bytes 6F32 Type of file: Elementary file Byte 8: RFU: 00 Access conditions: UPDATE: ADM A READ / SEEK: CHV1 RFU bits 41: 1111 INCREASE: NEVER INVALIDATE: NEVER REHABILITATE: NEVER File status: Invalidation status: File not invalidated Readable/updatable: Readable/updatable when invalidated RFU bits 84, 2: Length of following data: 2 bytes Structure: Transparent READ BINARY (Offset 0, Len 60) s READ BINARY Proactive SIM command pending response length 63 GSM (7F20) Cooperative Network List (6F32) s Offset: 0 Length: 60 SELECT (2FF2) s Command parameters/data: SELECT File ID not found GSM (7F20) Cooperative Network List (6F32) s 2F F2 2 bytes 2F F2 SELECT (GID1) s SELECT Proactive SIM command pending response

13 length 63 GSM (7F20) Group Identifier Level 1 (6F3E) s Group Identifier Level 1 RFU bytes 12: File size: 1 bytes 6F3E Type of file: Elementary file Byte 8: RFU: 00 Access conditions: UPDATE: ADM A READ / SEEK: CHV1 RFU bits 41: 1111 INCREASE: NEVER INVALIDATE: NEVER REHABILITATE: NEVER File status: Invalidation status: File not invalidated Readable/updatable: Readable/updatable when invalidated RFU bits 84, 2: Length of following data: 2 bytes Structure: Transparent READ BINARY (Offset 0, Len 1) s READ BINARY Proactive SIM command pending response length 63 GSM (7F20) Group Identifier Level 1 (6F3E) s Offset: 0 Length: 1 SIM group identifier: 01 SELECT (GID2) s SELECT Proactive SIM command pending response length 63 GSM (7F20) Group Identifier Level 2 (6F3F) s Group Identifier Level 2 RFU bytes 12: File size: 1 bytes 6F3F

14 Type of file: Elementary file Byte 8: RFU: 00 Access conditions: UPDATE: ADM A READ / SEEK: CHV1 RFU bits 41: 1111 INCREASE: NEVER INVALIDATE: NEVER REHABILITATE: NEVER File status: Invalidation status: File not invalidated Readable/updatable: Readable/updatable when invalidated RFU bits 84, 2: Length of following data: 2 bytes Structure: Transparent READ BINARY (Offset 0, Len 1) s READ BINARY Proactive SIM command pending response length 63 GSM (7F20) Group Identifier Level 2 (6F3F) s Offset: 0 Length: 1 SIM group identifier: FF SELECT (MF) s SELECT response length 27 Master File (3F00) None s Master File SELECT (2FE6) s Command parameters/data: SELECT File ID not found Master File (3F00) None s 2F E6 2 bytes 2F E6 SELECT (GSM) s

15 SELECT response length 27 GSM (7F20) None s GSM SELECT (IMSI) s SELECT Proactive SIM command pending response length 63 GSM (7F20) IMSI (6F07) s IMSI RFU bytes 12: File size: 9 bytes 6F07 Type of file: Elementary file Byte 8: RFU: 00 Access conditions: UPDATE: ADM A READ / SEEK: CHV1 RFU bits 41: 1111 INCREASE: NEVER INVALIDATE: CHV1 REHABILITATE: CHV1 File status: Invalidation status: File not invalidated Readable/updatable: Not readable/updatable when invalidated RFU bits 84, 2: Length of following data: 2 bytes Structure: Transparent SELECT (LOCI) s SELECT Proactive SIM command pending response length 63 GSM (7F20) Location information (6F7E) s Location information RFU bytes 12: File size: 11 bytes 6F7E Type of file: Elementary file

16 Byte 8: RFU: 00 Access conditions: UPDATE: CHV1 READ / SEEK: CHV1 RFU bits 41: 1111 INCREASE: NEVER INVALIDATE: CHV1 REHABILITATE: CHV1 File status: Invalidation status: File not invalidated Readable/updatable: Not readable/updatable when invalidated RFU bits 84, 2: Length of following data: 2 bytes Structure: Transparent SELECT (TELECOM) s SELECT response length 27 None s TELECOM SELECT (ADN) s SELECT Proactive SIM command pending response length 63 Abbreviated dialling numbers (6F3A) s Abbreviated dialling numbers RFU bytes 12: File size: 3750 bytes 6F3A Type of file: Elementary file Byte 8: RFU: 00 Access conditions: UPDATE: CHV1 READ / SEEK: CHV1 RFU bits 41: 1111 INCREASE: NEVER INVALIDATE: CHV2 REHABILITATE: CHV2 File status: Invalidation status: File not invalidated Readable/updatable: Readable/updatable when invalidated RFU bits 84, 2: Length of following data: 2 bytes

17 Structure: Linear fixed Length of record: 30 bytes SELECT (FDN) s SELECT Proactive SIM command pending response length 63 Fixed dialling numbers (6F3B) s Fixed dialling numbers RFU bytes 12: File size: 300 bytes 6F3B Type of file: Elementary file Byte 8: RFU: 00 Access conditions: UPDATE: CHV2 READ / SEEK: CHV1 RFU bits 41: 1111 INCREASE: NEVER INVALIDATE: NEVER REHABILITATE: NEVER File status: Invalidation status: File not invalidated Readable/updatable: Readable/updatable when invalidated RFU bits 84, 2: Length of following data: 2 bytes Structure: Linear fixed Length of record: 30 bytes SELECT (EXT2) s SELECT Proactive SIM command pending response length 63 Extension2 (6F4B) s Extension2 RFU bytes 12: File size: 13 bytes 6F4B Type of file: Elementary file Byte 8: RFU: 00 Access conditions: UPDATE: READ / SEEK: CHV2 CHV1

18 RFU bits 41: 1111 INCREASE: NEVER INVALIDATE: NEVER REHABILITATE: NEVER File status: Invalidation status: File not invalidated Readable/updatable: Readable/updatable when invalidated RFU bits 84, 2: Length of following data: 2 bytes Structure: Linear fixed Length of record: 13 bytes SELECT (GSM) s SELECT response length 27 GSM (7F20) None s GSM SELECT (ACC) s SELECT response length 15 GSM (7F20) Access control class (6F78) s Access control class READ BINARY (Offset 0, Len 2) s READ BINARY Proactive SIM command pending response length 63 Offset: 0 Length: 2 GSM (7F20) Access control class (6F78) s Access control classes: ACC number 0: ACC number 1: ACC number 2: ACC number 3: ACC number 4: ACC number 5: ACC number 6: ACC number 7: ACC number 8: ACC number 9: not allocated not allocated not allocated not allocated not allocated not allocated not allocated allocated not allocated not allocated

19 Bit 3 of Byte 1: 0 ACC number 11: not allocated ACC number 12: not allocated ACC number 13: not allocated ACC number 14: not allocated ACC number 15: not allocated SELECT (6F16) s SELECT File ID not found GSM (7F20) Access control class (6F78) s 6F 16 Command parameters/data: 2 bytes 6F 16 SELECT (6F14) s SELECT File ID not found GSM (7F20) Access control class (6F78) s 6F 14 Command parameters/data: 2 bytes 6F 14 SELECT (MF) s SELECT response length 27 Master File (3F00) None s Master File SELECT (ICCID) s SELECT Proactive SIM command pending response length 63 Master File (3F00) ICC Identification (2FE2) s ICC Identification RFU bytes 12: File size: 10 bytes

20 2FE2 Type of file: Elementary file Byte 8: RFU: 00 Access conditions: UPDATE: ADM A READ / SEEK: ALWAYS RFU bits 41: 1111 INCREASE: NEVER INVALIDATE: NEVER REHABILITATE: NEVER File status: Invalidation status: File not invalidated Readable/updatable: Readable/updatable when invalidated RFU bits 84, 2: Length of following data: 2 bytes Structure: Transparent READ BINARY (Offset 0, Len 10) s READ BINARY Proactive SIM command pending response length 63 Master File (3F00) ICC Identification (2FE2) s Offset: 0 Length: 10 ICCID: SELECT (GSM) s SELECT response length 27 GSM (7F20) None s GSM SELECT (IMSI) s SELECT Proactive SIM command pending response length 63 GSM (7F20) IMSI (6F07) s IMSI RFU bytes 12: 00 00

21 File size: 9 bytes 6F07 Type of file: Elementary file Byte 8: RFU: 00 Access conditions: UPDATE: ADM A READ / SEEK: CHV1 RFU bits 41: 1111 INCREASE: NEVER INVALIDATE: CHV1 REHABILITATE: CHV1 File status: Invalidation status: File not invalidated Readable/updatable: Not readable/updatable when invalidated RFU bits 84, 2: Length of following data: 2 bytes Structure: Transparent READ BINARY (Offset 0, Len 9) s READ BINARY Proactive SIM command pending response length 63 GSM (7F20) IMSI (6F07) s Offset: 0 Length: 9 Length of IMSI: 8 IMSI: Byte 2: Parity: 1 Bits 31: 001 MCC: 262 MNC: 01 MSIN: SELECT (AD) s SELECT Proactive SIM command pending response length 63 GSM (7F20) Administrative data (6FAD) s Administrative data RFU bytes 12: File size: 3 bytes 6FAD

22 Type of file: Elementary file Byte 8: RFU: 00 Access conditions: UPDATE: ADM 6 READ / SEEK: ALWAYS RFU bits 41: 1111 INCREASE: NEVER INVALIDATE: NEVER REHABILITATE: NEVER File status: Invalidation status: File not invalidated Readable/updatable: Readable/updatable when invalidated RFU bits 84, 2: Length of following data: 2 bytes Structure: Transparent READ BINARY (Offset 0, Len 1) s READ BINARY Proactive SIM command pending response length 63 GSM (7F20) Administrative data (6FAD) s Offset: 0 Length: 1 Response parameters/data: 1 byte 00 SELECT (LOCI) s SELECT response length 15 GSM (7F20) Location information (6F7E) s Location information READ BINARY (Offset 0, Len 11) s READ BINARY Proactive SIM command pending response length 63 GSM (7F20) Location information (6F7E) s Offset: 0 Length: 11

23 TMSITemporary Mobile Subscriber BD A3 F0 DD Identity: LAILocation Area Information: MCC 262, MNC 01, LAC 8707 TMSI TIME: Timer is not running Location update status: RFU bits 84: Location update status: Updated SELECT (Kc) s SELECT response length 15 GSM (7F20) Ciphering key Kc (6F20) s Ciphering key Kc READ BINARY (Offset 0, Len 9) s READ BINARY Proactive SIM command pending response length 63 GSM (7F20) Ciphering key Kc (6F20) s Offset: 0 Length: 9 Ciphering key Kc: 5C65AD35A Ciphering key sequence number: Bits 84: Ciphering key sequence number: 1 SELECT (BCCH) s SELECT response length 15 GSM (7F20) Broadcast control channels (6F74) s Broadcast control channels READ BINARY (Offset 0, Len 16) s READ BINARY Proactive SIM command pending response length 63 GSM (7F20) Broadcast control channels (6F74) s

24 Offset: 0 Length: 16 BCCH Format information: Bit map 0 EXTIND Extension indication: The complete BA BAIND Band indication: Is set to 0 Byte 317: A C SELECT (FPLMN) s SELECT response length 15 GSM (7F20) Forbidden PLMNs (6F7B) s Forbidden PLMNs READ BINARY (Offset 0, Len 12) s READ BINARY Proactive SIM command pending response length 63 GSM (7F20) Forbidden PLMNs (6F7B) s Offset: 0 Length: 12 FPLMN 1: MCC 222, MNC 10 FPLMN 2: MCC 262, MNC 02 FPLMN 3: MCC 262, MNC 07 FPLMN 4: MCC 262, MNC 03 SELECT (HPLMN) s SELECT response length 15 GSM (7F20) HPLMN search period (6F31) s HPLMN search period READ BINARY (Offset 0, Len 1) s READ BINARY Proactive SIM command pending response length 63 GSM (7F20) HPLMN search period (6F31) s

25 Offset: 0 Length: 1 Time interval: 30 minutes SELECT (ACM) s SELECT Proactive SIM command pending response length 63 GSM (7F20) Accumulated call meter (6F39) s Accumulated call meter RFU bytes 12: File size: 9 bytes 6F39 Type of file: Elementary file Byte 8: Increase command: Allowed RFU bits 8,61: Access conditions: UPDATE: CHV2 READ / SEEK: CHV1 RFU bits 41: 1111 INCREASE: CHV1 INVALIDATE: NEVER REHABILITATE: NEVER File status: Invalidation status: File not invalidated Readable/updatable: Readable/updatable when invalidated RFU bits 84, 2: Length of following data: 2 bytes Structure: Cyclic (CURR) s Proactive SIM command pending response length 63 GSM (7F20) Accumulated call meter (6F39) s Record No.: Current record Accumulated counts of units: 0 SELECT (ACMmax) s SELECT Proactive SIM command pending response

26 length 63 GSM (7F20) ACM maximum value (6F37) s ACM maximum value RFU bytes 12: File size: 3 bytes 6F37 Type of file: Elementary file Byte 8: RFU: 00 Access conditions: UPDATE: CHV2 READ / SEEK: CHV1 RFU bits 41: 1111 INCREASE: NEVER INVALIDATE: NEVER REHABILITATE: NEVER File status: Invalidation status: File not invalidated Readable/updatable: Readable/updatable when invalidated RFU bits 84, 2: Length of following data: 2 bytes Structure: Transparent SELECT (ACMmax) s SELECT Proactive SIM command pending response length 63 GSM (7F20) ACM maximum value (6F37) s ACM maximum value RFU bytes 12: File size: 3 bytes 6F37 Type of file: Elementary file Byte 8: RFU: 00 Access conditions: UPDATE: CHV2 READ / SEEK: CHV1 RFU bits 41: 1111 INCREASE: NEVER INVALIDATE: NEVER REHABILITATE: NEVER File status: Invalidation status: File not invalidated Readable/updatable: Readable/updatable when invalidated

27 RFU bits 84, 2: Length of following data: 2 bytes Structure: Transparent READ BINARY (Offset 0, Len 3) s READ BINARY Proactive SIM command pending response length 63 GSM (7F20) ACM maximum value (6F37) s Offset: 0 Length: 3 Maximum value of the ACM: not valid SELECT (PUCT) s SELECT Proactive SIM command pending response length 63 GSM (7F20) Price per unit and currency table (6F41) s Price per unit and currency table RFU bytes 12: File size: 5 bytes 6F41 Type of file: Elementary file Byte 8: RFU: 00 Access conditions: UPDATE: CHV2 READ / SEEK: CHV1 RFU bits 41: 1111 INCREASE: NEVER INVALIDATE: NEVER REHABILITATE: NEVER File status: Invalidation status: File not invalidated Readable/updatable: Readable/updatable when invalidated RFU bits 84, 2: Length of following data: 2 bytes Structure: Transparent READ BINARY (Offset 0, Len 5) s READ BINARY Proactive SIM command pending response length 63

28 GSM (7F20) Price per unit and currency table (6F41) s Offset: 0 Length: 5 Currency code: DEM Price per unit: 0.23 SELECT (CBMI) s SELECT Proactive SIM command pending response length 63 GSM (7F20) Cell broadcast message identifier selection (6F45) s Cell broadcast message identifier selection RFU bytes 12: File size: 24 bytes 6F45 Type of file: Elementary file Byte 8: RFU: 00 Access conditions: UPDATE: CHV1 READ / SEEK: CHV1 RFU bits 41: 1111 INCREASE: NEVER INVALIDATE: NEVER REHABILITATE: NEVER File status: Invalidation status: File not invalidated Readable/updatable: Readable/updatable when invalidated RFU bits 84, 2: Length of following data: 2 bytes Structure: Transparent READ BINARY (Offset 0, Len 20) s READ BINARY Proactive SIM command pending response length 63 GSM (7F20) Cell broadcast message identifier selection (6F45) s Offset: 0 Length: 20 CB Message Identifier 1: Reserved

29 CB Message Identifier 2: Reserved CB Message Identifier 3: Reserved CB Message Identifier 4: Reserved CB Message Identifier 5: Reserved CB Message Identifier 6: Reserved CB Message Identifier 7: Reserved CB Message Identifier 8: Reserved CB Message Identifier 9: Reserved CB Message Identifier 10: Reserved SELECT (TELECOM) s SELECT response length 27 None s TELECOM SELECT (LND) s SELECT Proactive SIM command pending response length 63 Last number dialled (6F44) s Last number dialled RFU bytes 12: File size: 200 bytes 6F44 Type of file: Elementary file Byte 8: Increase command: Not allowed RFU bits 8,61: Access conditions: UPDATE: CHV1 READ / SEEK: CHV1 RFU bits 41: 1111 INCREASE: NEVER INVALIDATE: NEVER REHABILITATE: NEVER File status: Invalidation status: File not invalidated Readable/updatable: Readable/updatable when invalidated RFU bits 84, 2: Length of following data: 2 bytes Structure: Cyclic Length of record: 20 bytes SELECT (SMSS) s

30 SELECT Proactive SIM command pending response length 63 SMS status (6F43) s SMS status RFU bytes 12: File size: 2 bytes 6F43 Type of file: Elementary file Byte 8: RFU: 00 Access conditions: UPDATE: CHV1 READ / SEEK: CHV1 RFU bits 41: 1111 INCREASE: NEVER INVALIDATE: NEVER REHABILITATE: NEVER File status: Invalidation status: File not invalidated Readable/updatable: Readable/updatable when invalidated RFU bits 84, 2: Length of following data: 2 bytes Structure: Transparent READ BINARY (Offset 0, Len 2) s READ BINARY Proactive SIM command pending response length 63 SMS status (6F43) s Offset: 0 Length: 2 Last used TPMessages Reference: 104 SMS "Memory Capacity Exceeded" Notification Flag: Bits 82: Bit 1: Memory capacity available SELECT (EXT1) s SELECT Proactive SIM command pending response length 63 Extension1 (6F4A)

31 s Extension1 RFU bytes 12: File size: 130 bytes 6F4A Type of file: Elementary file Byte 8: RFU: 00 Access conditions: UPDATE: CHV1 READ / SEEK: CHV1 RFU bits 41: 1111 INCREASE: NEVER INVALIDATE: NEVER REHABILITATE: NEVER File status: Invalidation status: File not invalidated Readable/updatable: Readable/updatable when invalidated RFU bits 84, 2: Length of following data: 2 bytes Structure: Linear fixed Length of record: 13 bytes SELECT (CCP) s SELECT Proactive SIM command pending response length 63 Capability configuration parameters (6F3D) s Capability configuration parameters RFU bytes 12: File size: 28 bytes 6F3D Type of file: Elementary file Byte 8: RFU: 00 Access conditions: UPDATE: CHV1 READ / SEEK: CHV1 RFU bits 41: 1111 INCREASE: NEVER INVALIDATE: NEVER REHABILITATE: NEVER File status: Invalidation status: File not invalidated Readable/updatable: Readable/updatable when invalidated RFU bits 84, 2: Length of following data: 2 bytes Structure: Linear fixed Length of record: 14 bytes

32 SELECT (SMSP) s SELECT Proactive SIM command pending response length 63 Short message service parameters (6F42) s Short message service parameters RFU bytes 12: File size: 80 bytes 6F42 Type of file: Elementary file Byte 8: RFU: 00 Access conditions: UPDATE: CHV1 READ / SEEK: CHV1 RFU bits 41: 1111 INCREASE: NEVER INVALIDATE: NEVER REHABILITATE: NEVER File status: Invalidation status: File not invalidated Readable/updatable: Readable/updatable when invalidated RFU bits 84, 2: Length of following data: 2 bytes Structure: Linear fixed Length of record: 40 bytes SELECT (GSM) s SELECT response length 27 GSM (7F20) None s GSM SELECT (SPN) s SELECT Proactive SIM command pending response length 63 GSM (7F20) Service Provider Name (6F46) s Service Provider Name RFU bytes 12: 00 00

33 File size: 17 bytes 6F46 Type of file: Elementary file Byte 8: RFU: 00 Access conditions: UPDATE: ADM 6 READ / SEEK: ALWAYS RFU bits 41: 1111 INCREASE: NEVER INVALIDATE: NEVER REHABILITATE: NEVER File status: Invalidation status: File not invalidated Readable/updatable: Readable/updatable when invalidated RFU bits 84, 2: Length of following data: 2 bytes Structure: Transparent READ BINARY (Offset 0, Len 17) s READ BINARY Proactive SIM command pending response length 63 GSM (7F20) Service Provider Name (6F46) s Offset: 0 Length: 17 Display condition RFU bits 82: Display condition: display of registered PLMN required Service provider name: SELECT (CBMIR) s SELECT Proactive SIM command pending response length 63 GSM (7F20) Cell broadcast message identifier range selection (6F50) s Cell broadcast message identifier range selection RFU bytes 12: File size: 16 bytes 6F50 Type of file: Elementary file Byte 8: RFU: 00 Access conditions:

34 UPDATE: CHV1 READ / SEEK: CHV1 RFU bits 41: 1111 INCREASE: NEVER INVALIDATE: NEVER REHABILITATE: NEVER File status: Invalidation status: File not invalidated Readable/updatable: Readable/updatable when invalidated RFU bits 84, 2: Length of following data: 2 bytes Structure: Transparent READ BINARY (Offset 0, Len 16) s READ BINARY Proactive SIM command pending response length 63 GSM (7F20) Cell broadcast message identifier range selection (6F50) s Offset: 0 Length: 16 CB Message Identifier : Range 1 CB Message Identifier : Range 2 CB Message Identifier : Range 3 CB Message Identifier : Range 4 Not used Not used Not used Not used SELECT (KcGPRS) s SELECT Proactive SIM command pending response length 63 GSM (7F20) GPRS Ciphering key KcGPRS (6F52) s GPRS Ciphering key KcGPRS RFU bytes 12: File size: 9 bytes 6F52 Type of file: Elementary file Byte 8: RFU: 00 Access conditions: UPDATE: CHV1 READ / SEEK: CHV1 RFU bits 41: 1111 INCREASE: NEVER INVALIDATE: NEVER REHABILITATE: NEVER

35 File status: Invalidation status: File not invalidated Readable/updatable: Readable/updatable when invalidated RFU bits 84, 2: Length of following data: 2 bytes Structure: Transparent READ BINARY (Offset 0, Len 9) s READ BINARY Proactive SIM command pending response length 63 GSM (7F20) GPRS Ciphering key KcGPRS (6F52) s Offset: 0 Length: 9 Ciphering key KcGPRS: 4D1136FB4441E800 Ciphering key sequence number: Bits 84: Ciphering key sequence number: 0 SELECT (LOCIGPRS) s SELECT Proactive SIM command pending response length 63 GSM (7F20) GPRS location information (6F53) s GPRS location information RFU bytes 12: File size: 14 bytes 6F53 Type of file: Elementary file Byte 8: RFU: 00 Access conditions: UPDATE: CHV1 READ / SEEK: CHV1 RFU bits 41: 1111 INCREASE: NEVER INVALIDATE: NEVER REHABILITATE: NEVER File status: Invalidation status: File not invalidated Readable/updatable: Readable/updatable when invalidated RFU bits 84, 2: Length of following data: 2 bytes Structure: Transparent

36 READ BINARY (Offset 0, Len 14) s READ BINARY Proactive SIM command pending response length 63 GSM (7F20) GPRS location information (6F53) s Offset: 0 Length: 14 PTMSI: C E PTMSI Signature Value: FF FF FF RAI Routing Area Information: MCC 262, MNC 01, LAC 8707, RAC 01 Routing Area update status: RFU bits 84: Routing Area update status: Updated SELECT (6F13) s SELECT File ID not found GSM (7F20) GPRS location information (6F53) s 6F 13 Command parameters/data: 2 bytes 6F 13 SELECT (6F11) s SELECT File ID not found GSM (7F20) GPRS location information (6F53) s 6F 11 Command parameters/data: 2 bytes 6F 11 SELECT (EA03) s SELECT File ID not found GSM (7F20) GPRS location information (6F53) s EA 03

37 Command parameters/data: 2 bytes EA 03 SELECT (EA00) s SELECT File ID not found GSM (7F20) GPRS location information (6F53) s EA 00 Command parameters/data: 2 bytes EA 00 SELECT (7F43) s SELECT File ID not found GSM (7F20) GPRS location information (6F53) s 7F 43 Command parameters/data: 2 bytes 7F 43 SELECT (TELECOM) s SELECT response length 27 None s TELECOM SELECT (2FF1) s Command parameters/data: SELECT File ID not found None s 2F F1 2 bytes 2F F1 SELECT (GSM) s SELECT response length 27

38 PLMN 1: MCC 232, MNC 03 PLMN 2: MCC 232, MNC 01 PLMN 3: MCC 208, MNC 20 PLMN 4: MCC 204, MNC 16 PLMN 5: MCC 204, MNC 08 PLMN 6: MCC 214, MNC 07 GSM (7F20) None s GSM SELECT (PLMNsel) s SELECT Proactive SIM command pending response length 63 GSM (7F20) PLMN selector (6F30) s PLMN selector RFU bytes 12: File size: 90 bytes 6F30 Type of file: Elementary file Byte 8: RFU: 00 Access conditions: UPDATE: CHV1 READ / SEEK: CHV1 RFU bits 41: 1111 INCREASE: NEVER INVALIDATE: NEVER REHABILITATE: NEVER File status: Invalidation status: File not invalidated Readable/updatable: Readable/updatable when invalidated RFU bits 84, 2: Length of following data: 2 bytes Structure: Transparent READ BINARY (Offset 0, Len 90) s READ BINARY Proactive SIM command pending response length 63 GSM (7F20) PLMN selector (6F30) s Offset: 0 Length: 90

39 PLMN 7: MCC 222, MNC 01 PLMN 8: MCC 234, MNC 30 PLMN 9: MCC 228, MNC 02 PLMN 10: MCC 216, MNC 30 PLMN 11: MCC 230, MNC 01 PLMN 12: MCC 260, MNC 02 PLMN 13: MCC 310, MNC 260 PLMN 14: MCC 231, MNC 02 PLMN 15: MCC 206, MNC 10 PLMN 16: MCC 202, MNC 01 PLMN 17: MCC 232, MNC 05 PLMN 18: MCC 219, MNC 01 PLMN 19: MCC 234, MNC 10 PLMN 20: MCC 240, MNC 01 PLMN 21: MCC 244, MNC 91 PLMN 22: MCC 250, MNC 01 PLMN 23: MCC 286, MNC 02 PLMN 24: MCC 238, MNC 02 PLMN 25: MCC 268, MNC 03 PLMN 26: MCC 272, MNC 02 PLMN 27: MCC 293, MNC 41 PLMN 28: MCC 242, MNC 02 PLMN 29: MCC 270, MNC 01 PLMN 30: MCC 310, MNC 160 SELECT (TELECOM) s SELECT response length 27 None s TELECOM SELECT (SMS) s SELECT Proactive SIM command pending response length 63 Short messages (6F3C) s Short messages RFU bytes 12: File size: 2640 bytes 6F3C Type of file: Elementary file Byte 8: RFU: 00 Access conditions: UPDATE: CHV1

40 READ / SEEK: CHV1 RFU bits 41: 1111 INCREASE: NEVER INVALIDATE: NEVER REHABILITATE: NEVER File status: Invalidation status: File not invalidated Readable/updatable: Readable/updatable when invalidated RFU bits 84, 2: Length of following data: 2 bytes Structure: Linear fixed Length of record: 176 bytes SELECT (MSISDN) s SELECT Proactive SIM command pending response length 63 MSISDN (6F40) s MSISDN RFU bytes 12: File size: 90 bytes 6F40 Type of file: Elementary file Byte 8: RFU: 00 Access conditions: UPDATE: CHV1 READ / SEEK: CHV1 RFU bits 41: 1111 INCREASE: NEVER INVALIDATE: NEVER REHABILITATE: NEVER File status: Invalidation status: File not invalidated Readable/updatable: Readable/updatable when invalidated RFU bits 84, 2: Length of following data: 2 bytes Structure: Linear fixed Length of record: 30 bytes (1) s Proactive SIM command pending response length 63 MSISDN (6F40) s

41 Record No.: 1 Length of alpha identifier: 16 characters Alpha identifier: Eigene Rufnummer Length of BCD number: 7 TON and NPI Bit 8: 1 Type Of Number: International number Numbering Plan Identification: ISDN/telephony numbering plan Dialling number: Capability / Configuration Identifier: Not used Extension1 Record Identifier: Not used (2) s Proactive SIM command pending response length 63 MSISDN (6F40) s Record No.: 2 Response parameters/data: 30 bytes FF FF FF FF FF FF SELECT (SMS) s SELECT response length 15 Short messages (6F3C) s Short messages (1) s Proactive SIM command pending response length 63 Short messages (6F3C) s Record No.: 1

42 RFU bits 86: 000 free space TSService Centre Address: Bit 8: 1 TypeOfNumber: International number NumberingPlanIdentification: ISDN/telephony numbering plan Address value: SMS TPDU: TPMessageTypeIndicator: SMSDELIVER (in the direction SC to MS) TPMoreMessagestoSend: No more messages are waiting for the MS in this SC TPReplyPath: TPReplyPath parameter is not set in this SMSDELIVER TPUserDataHeaderIndicator: The TPUD field contains only the short message TPStatusReportIndication: A status report shall not be returned to the SME Bits 43: 00 TPOriginatingAddress: Bit 8: 1 TypeOfNumber: Unknown NumberingPlanIdentification: Reserved for CTS Address value: TPProtocolIdentifier: Telematic interworking: value specific to each SC, usage based on mutual agreement between the SME and the SC TPDataCodingScheme: Bits 87: General Data Coding Bit 6: Text is uncompressed Bit 5: Bits 21 are reserved and have no message class meaning Bits 43: GSM 7 bit default alphabet Bits 21: Reserved and have no class meaning TPServiceCentreTimeStamp: :15:24 GMT + 1 TPUserDataLength: 123 TPUserData: "Ihre SMS vom um 16:14:49 an xxxx konnte nicht zugestellt werden. Die Zielrufnummer war nicht erreichbar. " SELECT (LND) s SELECT response length 15 Last number dialled (6F44) s Last number dialled (1) s Proactive SIM command pending response length 63 Last number dialled (6F44) s

43 Record No.: 1 Length of alpha identifier: 6 characters Alpha identifier: Dobo Length of BCD number: 7 TON and NPI Bit 8: 1 Type Of Number: Numbering Plan Identification: Dialling number: Capability / Configuration Identifier: Extension1 Record Identifier: FETCH (SET UP MENU) s International number ISDN/telephony numbering plan xxxx Not used Not used FETCH Last number dialled (6F44) s Proactive SIM Command Command Details Command Number: 1 Command Name: SET UP MENU Command Qualifier: no selection preference, no help information available Device Identity Source: SIM Destination: ME Alpha Identifier: Special Item Identifier of item: 01 Text String: SMS News Item Identifier of item: 02 Text String: Mail & Fax Item Identifier of item: 03 Text String: MyMoney Item Identifier of item: 04 Text String: Extras SELECT (SMS) s SELECT response length 15 Short messages (6F3C) s Short messages

44 (2) s Short messages (6F3C) s Record No.: 2 RFU bits 86: 000 free space TSService Centre Address: Bit 8: 1 TypeOfNumber: International number NumberingPlanIdentification: ISDN/telephony numbering plan Address value: SMS TPDU: TPMessageTypeIndicator: SMSDELIVER (in the direction SC to MS) TPMoreMessagestoSend: No more messages are waiting for the MS in this SC TPReplyPath: TPReplyPath parameter is not set in this SMSDELIVER TPUserDataHeaderIndicator: The TPUD field contains only the short message TPStatusReportIndication: A status report shall not be returned to the SME Bits 43: 00 TPOriginatingAddress: Bit 8: 1 TypeOfNumber: Unknown NumberingPlanIdentification: ISDN/telephony numbering plan Address value: 3311 TPProtocolIdentifier: Replace short message type 1 TPDataCodingScheme: Bits 87: General Data Coding Bit 6: Text is uncompressed Bit 5: Bits 21 are reserved and have no message class meaning Bits 43: GSM 7 bit default alphabet Bits 21: Reserved and have no class meaning TPServiceCentreTimeStamp: :09:31 TPUserDataLength: 98 TPUserData: "TD1 Box, neu: 2 Anruf(e) 0 Fax 17/03/03 18:09. SELECT (LND) s Abfrage mit "3311", mit " " im Ausland" SELECT response length 15 Last number dialled (6F44) s

45 Last number dialled (2) s Last number dialled (6F44) s Record No.: 2 Length of alpha identifier: 6 characters Alpha identifier: Rankl, Length of BCD number: 7 TON and NPI Bit 8: 1 Type Of Number: International number Numbering Plan Identification: ISDN/telephony numbering plan Dialling number: 4989xxxxxxxx Capability / Configuration Identifier: Not used Extension1 Record Identifier: Not used SELECT (SMS) s SELECT response length 15 Short messages (6F3C) s Short messages (3) s Short messages (6F3C) s Record No.: 3 RFU bits 86: 000 free space TSService Centre Address: Bit 8: 1 TypeOfNumber: International number NumberingPlanIdentification: ISDN/telephony numbering plan Address value: SMS TPDU:

46 TPMessageTypeIndicator: SMSDELIVER (in the direction SC to MS) TPMoreMessagestoSend: No more messages are waiting for the MS in this SC TPReplyPath: TPReplyPath parameter is not set in this SMSDELIVER TPUserDataHeaderIndicator: The TPUD field contains only the short message TPStatusReportIndication: A status report shall not be returned to the SME Bits 43: 00 TPOriginatingAddress: Bit 8: 1 TypeOfNumber: Unknown NumberingPlanIdentification: Reserved for CTS Address value: 8000 TPProtocolIdentifier: Telematic interworking: value specific to each SC, usage based on mutual agreement between the SME and the SC TPDataCodingScheme: Bits 87: General Data Coding Bit 6: Text is uncompressed Bit 5: Bits 21 are reserved and have no message class meaning Bits 43: GSM 7 bit default alphabet Bits 21: Reserved and have no class meaning TPServiceCentreTimeStamp: :52:48 GMT + 1 TPUserDataLength: 72 TPUserData: "[email protected] Test =?ISO88591?Q?f=FCr_Wolfgang_Nr=2E_2?=" (4) s Short messages (6F3C) s Record No.: 4 RFU bits 86: 000 free space TSService Centre Address: Bit 8: 1 TypeOfNumber: International number NumberingPlanIdentification: ISDN/telephony numbering plan Address value: SMS TPDU: TPMessageTypeIndicator: SMSDELIVER (in the direction SC to MS) TPMoreMessagestoSend: No more messages are waiting for the MS in this SC TPReplyPath: TPReplyPath parameter is not set in this SMSDELIVER TPUserDataHeaderIndicator: The TPUD field contains only the short message TPStatusReportIndication: A status report shall not be returned to the SME Bits 43: 00 TPOriginatingAddress:

47 Bit 8: 1 TypeOfNumber: Unknown NumberingPlanIdentification: Reserved for CTS Address value: 8000 TPProtocolIdentifier: Telematic interworking: value specific to each SC, usage based on mutual agreement between the SME and the SC TPDataCodingScheme: Bits 87: General Data Coding Bit 6: Text is uncompressed Bit 5: Bits 21 are reserved and have no message class meaning Bits 43: GSM 7 bit default alphabet Bits 21: Reserved and have no class meaning TPServiceCentreTimeStamp: :15:06 GMT + 1 TPUserDataLength: 146 TPUserData: "Sie haben Ihren Mail Account seit nicht genutzt. Senden Sie bitte diese oder eine andere SMS an die 8000, um ihn weiter nutzen zu können." (5) s Short messages (6F3C) s Record No.: 5 RFU bits 86: 000 free space TSService Centre Address: Bit 8: 1 TypeOfNumber: International number NumberingPlanIdentification: ISDN/telephony numbering plan Address value: SMS TPDU: TPMessageTypeIndicator: SMSDELIVER (in the direction SC to MS) TPMoreMessagestoSend: No more messages are waiting for the MS in this SC TPReplyPath: TPReplyPath parameter is not set in this SMSDELIVER TPUserDataHeaderIndicator: The TPUD field contains only the short message TPStatusReportIndication: A status report shall not be returned to the SME Bits 43: 00 TPOriginatingAddress: Bit 8: 1 TypeOfNumber: International number NumberingPlanIdentification: ISDN/telephony numbering plan Address value: xxxx TPProtocolIdentifier: No interworking, but SMEtoSME protocol TPDataCodingScheme: Bits 87: General Data Coding

48 Bit 6: Text is uncompressed Bit 5: Bits 21 are reserved and have no message class meaning Bits 43: GSM 7 bit default alphabet Bits 21: Reserved and have no class meaning TPServiceCentreTimeStamp: :27:54 GMT + 1 TPUserDataLength: 44 TPUserData: " PC send time: Fri Apr 25 15:27:43 CEST 2003" SELECT (LND) s SELECT response length 15 Last number dialled (6F44) s Last number dialled (3) s Last number dialled (6F44) s Record No.: 3 Length of alpha identifier: 6 characters Alpha identifier: Horak, Length of BCD number: 7 TON and NPI Bit 8: 1 Type Of Number: International number Numbering Plan Identification: ISDN/telephony numbering plan Dialling number: Capability / Configuration Identifier: Not used Extension1 Record Identifier: Not used TERMINAL RESPONSE (SET UP MENU) s TERMINAL RESPONSE Proactive SIM command pending response length 11 Last number dialled (6F44) s Command Details Command Number: 1 Command Name: SET UP MENU Command Qualifier: no selection preference, no help information

49 Device Identity Source: Destination: Result General Result: available ME SIM Command performed successfully SELECT (SMS) s SELECT response length 15 Short messages (6F3C) s Short messages (6) s Proactive SIM command pending response length 11 Short messages (6F3C) s Record No.: 6 RFU bits 86: 000 free space TSService Centre Address: Bit 8: 1 TypeOfNumber: International number NumberingPlanIdentification: ISDN/telephony numbering plan Address value: SMS TPDU: TPMessageTypeIndicator: SMSCOMMAND (in the direction MS to SC) TPUserDataHeaderIndication: The TPUD field contains only the short message TPStatusReportRequest: A status report is not requested Bits 8,53: 0001 TPMessageReference: 76 TPProtocolIdentifier: No interworking, but SMEtoSME protocol TPCommandType: Values specific for each SC TPMessageNumber: 16 TPDestinationAddress: Bit 8: 0 TypeOfNumber: Unknown NumberingPlanIdentification: Reserved for CTS Address value: Invalid value F FF FF FF FF FF FF

50 SELECT (LND) s SELECT response length 15 Last number dialled (6F44) s Last number dialled (4) s Proactive SIM command pending response length 11 Last number dialled (6F44) s Record No.: 4 Length of alpha identifier: 6 characters Alpha identifier: Daksie Length of BCD number: 7 TON and NPI Bit 8: 1 Type Of Number: International number Numbering Plan Identification: ISDN/telephony numbering plan Dialling number: Capability / Configuration Identifier: Not used Extension1 Record Identifier: Not used FETCH (PROVIDE LOCAL INFORMATION) s FETCH

51 Last number dialled (6F44) s Proactive SIM Command Command Details Command Number: 1 Command Name: PROVIDE LOCAL INFORMATION Command Qualifier: IMEI of the ME Device Identity Source: SIM Destination: ME SELECT (SMS) s SELECT response length 15 Short messages (6F3C) s Short messages (7) s Short messages (6F3C) s Record No.: 7 RFU bits 86: 000 free space TSService Centre Address: Bit 8: 1 TypeOfNumber: International number NumberingPlanIdentification: ISDN/telephony numbering plan Address value: SMS TPDU: TPMessageTypeIndicator: SMSCOMMAND (in the direction MS to SC) TPUserDataHeaderIndication: The TPUD field contains only the short message TPStatusReportRequest: A status report is not requested Bits 8,53: 0001 TPMessageReference: 76 TPProtocolIdentifier: No interworking, but SMEtoSME protocol TPCommandType: Values specific for each SC TPMessageNumber: 148 TPDestinationAddress: Bit 8: 0 TypeOfNumber: Abbreviated number

52 NumberingPlanIdentification: Data numbering plan Address value: Invalid value FF FF FF FF FF FF SELECT (LND) s SELECT response length 15 Last number dialled (6F44) s Last number dialled (5) s Last number dialled (6F44) s Record No.: 5 Length of alpha identifier: 6 characters Alpha identifier: Length of BCD number: 7 TON and NPI Bit 8: 1 Type Of Number: Unknown Numbering Plan Identification: ISDN/telephony numbering plan Dialling number: Capability / Configuration Identifier: Not used Extension1 Record Identifier: Not used

53 TERMINAL RESPONSE (PROVIDE LOCAL INFORMATION) s TERMINAL RESPONSE Last number dialled (6F44) s Command Details Command Number: 1 Command Name: PROVIDE LOCAL INFORMATION Command Qualifier: IMEI of the ME Device Identity Source: ME Destination: SIM Result General Result: Command performed successfully IMEI Type of Identity: IMEI Value: SELECT (SMS) s SELECT response length 15 Short messages (6F3C) s Short messages (8) s Short messages (6F3C) s Record No.: 8 RFU bits 86: 000 free space TSService Centre Address: Bit 8: 1 TypeOfNumber: International number NumberingPlanIdentification: ISDN/telephony numbering plan Address value: SMS TPDU: TPMessageTypeIndicator: SMSDELIVER (in the direction SC to MS) TPMoreMessagestoSend: No more messages are waiting for the MS in this SC

54 TPReplyPath: TPReplyPath parameter is not set in this SMSDELIVER TPUserDataHeaderIndicator: The TPUD field contains only the short message TPStatusReportIndication: A status report shall not be returned to the SME Bits 43: 00 TPOriginatingAddress: Bit 8: 1 TypeOfNumber: International number NumberingPlanIdentification: ISDN/telephony numbering plan Address value: TPProtocolIdentifier: No interworking, but SMEtoSME protocol TPDataCodingScheme: Bits 87: General Data Coding Bit 6: Text is uncompressed Bit 5: Bits 21 are reserved and have no message class meaning Bits 43: GSM 7 bit default alphabet Bits 21: Reserved and have no class meaning TPServiceCentreTimeStamp: :23:48 GMT + 2 TPUserDataLength: 144 TPUserData: "Hallo ihr Beiden! Schön von Euch zu hören! Wann und wo kann man Euch mal am besten anrufen? Viele Grüße (noch) aus Erfurt! Norman, Sarah &..?.." SELECT (LND) s SELECT response length 15 Last number dialled (6F44) s Last number dialled (6) s Last number dialled (6F44) s Record No.: 6 Length of alpha identifier: 6 characters Alpha identifier: Steink Length of BCD number: 7 TON and NPI Bit 8: 1 Type Of Number: International number Numbering Plan Identification: ISDN/telephony numbering plan Dialling number: Capability / Configuration Identifier: Not used Extension1 Record Identifier: Not used

55 SELECT (GSM) s SELECT response length 27 GSM (7F20) None s GSM RUN GSM ALGORITHM () s RAND: RUN GSM ALGORITHM GSM (7F20) None s 2E C9 10 E2 2F 4D C 33 D0 98 7A 64 CC SRES: E8 7F Cipher Key Kc: 00 B D 34 CC 00 SELECT (TELECOM) s SELECT response length 27 None s TELECOM SELECT (SMS) s SELECT response length 15 Short messages (6F3C) s Short messages (9) s Short messages (6F3C) s Record No.: 9

56 RFU bits 86: 000 free space TSService Centre Address: Bit 8: 1 TypeOfNumber: International number NumberingPlanIdentification: ISDN/telephony numbering plan Address value: SMS TPDU: TPMessageTypeIndicator: SMSDELIVER (in the direction SC to MS) TPMoreMessagestoSend: No more messages are waiting for the MS in this SC TPReplyPath: TPReplyPath parameter is not set in this SMSDELIVER TPUserDataHeaderIndicator: The TPUD field contains only the short message TPStatusReportIndication: A status report shall not be returned to the SME Bits 43: 00 TPOriginatingAddress: Bit 8: 1 TypeOfNumber: Unknown NumberingPlanIdentification: Reserved for CTS Address value: 8000 TPProtocolIdentifier: Telematic interworking: value specific to each SC, usage based on mutual agreement between the SME and the SC TPDataCodingScheme: Bits 87: General Data Coding Bit 6: Text is uncompressed Bit 5: Bits 21 are reserved and have no message class meaning Bits 43: GSM 7 bit default alphabet Bits 21: Reserved and have no class meaning TPServiceCentreTimeStamp: :28:04 GMT + 1 TPUserDataLength: 130 TPUserData: "Mail Delivery Subsystem <[email protected]> Returned mail: see transcript for details This is a MIMEencapsulated message" SELECT (LND) s SELECT response length 15 Last number dialled (6F44) s Last number dialled (7) s Last number dialled (6F44)

57 s Record No.: 7 Length of alpha identifier: 6 characters Alpha identifier: Length of BCD number: 7 TON and NPI Bit 8: 1 Type Of Number: Unknown Numbering Plan Identification: ISDN/telephony numbering plan Dialling number: Capability / Configuration Identifier: Not used Extension1 Record Identifier: Not used SELECT (GSM) s SELECT response length 27 GSM (7F20) None s GSM SELECT (Kc) s SELECT response length 15 GSM (7F20) Ciphering key Kc (6F20) s Ciphering key Kc UPDATE BINARY (Offset 0, Len 9) s UPDATE BINARY GSM (7F20) Ciphering key Kc (6F20) s Offset: 0 Length: 9 Ciphering key Kc: 00B105363D34CC00 Ciphering key sequence number: Bits 84: Ciphering key sequence number: 2 SELECT (TELECOM) s

58 SELECT response length 27 None s TELECOM SELECT (SMS) s SELECT response length 15 Short messages (6F3C) s Short messages (10) s Short messages (6F3C) s Record No.: 10 RFU bits 86: 000 free space TSService Centre Address: Bit 8: 1 TypeOfNumber: International number NumberingPlanIdentification: ISDN/telephony numbering plan Address value: SMS TPDU: TPMessageTypeIndicator: SMSDELIVER (in the direction SC to MS) TPMoreMessagestoSend: No more messages are waiting for the MS in this SC TPReplyPath: TPReplyPath parameter is not set in this SMSDELIVER TPUserDataHeaderIndicator: The TPUD field contains only the short message TPStatusReportIndication: A status report shall not be returned to the SME Bits 43: 00 TPOriginatingAddress: Bit 8: 1 TypeOfNumber: Unknown NumberingPlanIdentification: Reserved for CTS Address value: 8000 TPProtocolIdentifier: Telematic interworking: value specific to each SC, usage based on mutual agreement between the SME and the SC

59 TPDataCodingScheme: Bits 87: General Data Coding Bit 6: Text is uncompressed Bit 5: Bits 21 are reserved and have no message class meaning Bits 43: GSM 7 bit default alphabet Bits 21: Reserved and have no class meaning TPServiceCentreTimeStamp: :39:00 GMT + 1 TPUserDataLength: 133 TPUserData: "Ungültige Eingabe: Setzen Sie OPEN, CLOSE, ALIAS, DELALIAS, PW, DELPW, STATUS oder eine Adresse an den Anfang Ihrer Nachricht." SELECT (LND) s SELECT response length 15 Last number dialled (6F44) s (8) s Last number dialled Last number dialled (6F44) s Record No.: 8 Length of alpha identifier: 6 characters Alpha identifier: Weiß Length of BCD number: 7 TON and NPI Bit 8: 1 Type Of Number: International number Numbering Plan Identification: ISDN/telephony numbering plan Dialling number: Capability / Configuration Identifier: Not used Extension1 Record Identifier: Not used SELECT (SMS) s SELECT response length 15 Short messages (6F3C) s Short messages

60 (11) s Short messages (6F3C) s Record No.: 11 RFU bits 86: 000 free space TSService Centre Address: Bit 8: 1 TypeOfNumber: International number NumberingPlanIdentification: ISDN/telephony numbering plan Address value: SMS TPDU: TPMessageTypeIndicator: SMSDELIVER (in the direction SC to MS) TPMoreMessagestoSend: No more messages are waiting for the MS in this SC TPReplyPath: TPReplyPath parameter is not set in this SMSDELIVER TPUserDataHeaderIndicator: The TPUD field contains only the short message TPStatusReportIndication: A status report shall not be returned to the SME Bits 43: 00 TPOriginatingAddress: Bit 8: 1 TypeOfNumber: Unknown NumberingPlanIdentification: Reserved for CTS Address value: 8000 TPProtocolIdentifier: Telematic interworking: value specific to each SC, usage based on mutual agreement between the SME and the SC TPDataCodingScheme: Bits 87: General Data Coding Bit 6: Text is uncompressed Bit 5: Bits 21 are reserved and have no message class meaning Bits 43: GSM 7 bit default alphabet Bits 21: Reserved and have no class meaning TPServiceCentreTimeStamp: :40:11 GMT + 1 TPUserDataLength: 130 TPUserData: "Mail Delivery Subsystem <[email protected]> Returned mail: see transcript for details This is a MIMEencapsulated message" SELECT (LND) s SELECT response length 15 Last number dialled (6F44)

61 s Last number dialled (9) s Last number dialled (6F44) s Record No.: 9 Response parameters/data: 20 bytes FF FF FF FF SELECT (GSM) s SELECT response length 27 GSM (7F20) None s GSM SELECT (BCCH) s SELECT response length 15 GSM (7F20) Broadcast control channels (6F74) s Broadcast control channels UPDATE BINARY (Offset 0, Len 16) s UPDATE BINARY GSM (7F20) Broadcast control channels (6F74) s Offset: 0 Length: 16 BCCH Format information: Bit map 0 EXTIND Extension indication: The complete BA BAIND Band indication: Is set to 0

62 Byte 317: A C SELECT (LOCI) s SELECT response length 15 GSM (7F20) Location information (6F7E) s Location information UPDATE BINARY (Offset 0, Len 11) s UPDATE BINARY GSM (7F20) Location information (6F7E) s Offset: 0 Length: 11 TMSITemporary Mobile Subscriber BD A8 75 3E Identity: LAILocation Area Information: MCC 262, MNC 01, LAC 8707 TMSI TIME: Timer is not running Location update status: RFU bits 84: Location update status: Updated SELECT (TELECOM) s SELECT response length 27 None s TELECOM SELECT (SMS) s SELECT response length 15 Short messages (6F3C) s Short messages (12) s

63 Short messages (6F3C) s Record No.: 12 RFU bits 86: 000 free space TSService Centre Address: Bit 8: 1 TypeOfNumber: International number NumberingPlanIdentification: ISDN/telephony numbering plan Address value: SMS TPDU: TPMessageTypeIndicator: SMSCOMMAND (in the direction MS to SC) TPUserDataHeaderIndication: The TPUD field contains only the short message TPStatusReportRequest: A status report is not requested Bits 8,53: 0000 TPMessageReference: 80 TPProtocolIdentifier: No interworking, but SMEtoSME protocol TPCommandType: Values specific for each SC TPMessageNumber: 148 TPDestinationAddress: Bit 8: 0 TypeOfNumber: Reserved for extension NumberingPlanIdentification: ISDN/telephony numbering plan Address value: Invalid value FF FF FF FF FF FF SELECT (LND) s SELECT

64 response length 15 Last number dialled (6F44) s Last number dialled (10) s Last number dialled (6F44) s Record No.: 10 Response parameters/data: 20 bytes FF FF FF FF SELECT (SMS) s SELECT response length 15 Short messages (6F3C) s Short messages (13) s Short messages (6F3C) s Record No.: 13 RFU bits 86: 000 free space TSService Centre Address: Bit 8: 1 TypeOfNumber: International number NumberingPlanIdentification: ISDN/telephony numbering plan Address value:

65 SMS TPDU: TPMessageTypeIndicator: SMSCOMMAND (in the direction MS to SC) TPUserDataHeaderIndication: The TPUD field contains only the short message TPStatusReportRequest: A status report is not requested Bits 8,53: 0000 TPMessageReference: 81 TPProtocolIdentifier: No interworking, but SMEtoSME protocol TPCommandType: Values specific for each SC TPMessageNumber: 148 TPDestinationAddress: Bit 8: 0 TypeOfNumber: Reserved for extension NumberingPlanIdentification: ISDN/telephony numbering plan Address value: Invalid value FF FF FF FF FF FF SELECT (ADN) s SELECT response length 15 Abbreviated dialling numbers (6F3A) s Abbreviated dialling numbers (125) s Abbreviated dialling numbers (6F3A) s Record No.: 125

66 Response parameters/data: 30 bytes FF FF FF FF FF FF SELECT (SMSP) s SELECT response length 15 Short message service parameters (6F42) s Short message service parameters (1) s Short message service parameters (6F42) s Record No.: 1 Length of alpha identifier: 12 bytes Alpha Identifier: TD1 SMSCent Parameter Indicators: Bits 86: 111 TPDestination Address: Present TSService Centre Address: Present TPProtocol Identifier: Absent TPData Coding Scheme: Absent TPValidity Period: Present TPDestination Address: Bit 8: 1 TypeOfNumber: International number NumberingPlanIdentification: ISDN/telephony numbering plan Address value: TSService Centre Address: Bit 8: 1 TypeOfNumber: International number NumberingPlanIdentification: ISDN/telephony numbering plan Address value: TPValidityPeriod: 63 weeks SELECT (SMS) s SELECT response length 15

67 Short messages (6F3C) s Short messages (14) s Short messages (6F3C) s Record No.: 14 RFU bits 86: 000 free space TSService Centre Address: Bit 8: 1 TypeOfNumber: International number NumberingPlanIdentification: ISDN/telephony numbering plan Address value: SMS TPDU: TPMessageTypeIndicator: SMSCOMMAND (in the direction MS to SC) TPUserDataHeaderIndication: The TPUD field contains only the short message TPStatusReportRequest: A status report is not requested Bits 8,53: 0001 TPMessageReference: 82 TPProtocolIdentifier: No interworking, but SMEtoSME protocol TPCommandType: Values specific for each SC TPMessageNumber: 148 TPDestinationAddress: Bit 8: 0 TypeOfNumber: Reserved for extension NumberingPlanIdentification: ISDN/telephony numbering plan Address value: Invalid value FF FF FF FF FF FF

68 (15) s Short messages (6F3C) s Record No.: 15 RFU bits 86: 000 free space TSService Centre Address: Bit 8: 1 TypeOfNumber: International number NumberingPlanIdentification: ISDN/telephony numbering plan Address value: SMS TPDU: TPMessageTypeIndicator: SMSCOMMAND (in the direction MS to SC) TPUserDataHeaderIndication: The TPUD field contains only the short message TPStatusReportRequest: A status report is not requested Bits 8,53: 0001 TPMessageReference: 83 TPProtocolIdentifier: No interworking, but SMEtoSME protocol TPCommandType: Values specific for each SC TPMessageNumber: 148 TPDestinationAddress: Bit 8: 0 TypeOfNumber: Reserved for extension NumberingPlanIdentification: ISDN/telephony numbering plan Address value: Invalid value FF FF FF FF FF FF

69 SELECT (MSISDN) s SELECT response length 15 MSISDN (6F40) s MSISDN (1) s MSISDN (6F40) s Record No.: 1 Length of alpha identifier: 16 characters Alpha identifier: Eigene Rufnummer Length of BCD number: 7 TON and NPI Bit 8: 1 Type Of Number: International number Numbering Plan Identification: ISDN/telephony numbering plan Dialling number: Capability / Configuration Identifier: Not used Extension1 Record Identifier: Not used SELECT (SMSP) s SELECT response length 15 Short message service parameters (6F42) s Short message service parameters UPDATE RECORD (1) s UPDATE RECORD Short message service parameters (6F42) s

70 Record No.: 1 Length of alpha identifier: 12 bytes Alpha Identifier: TD1 SMSCent Parameter Indicators: Bits 86: 111 TPDestination Address: Present TSService Centre Address: Present TPProtocol Identifier: Absent TPData Coding Scheme: Absent TPValidity Period: Present TPDestination Address: Bit 8: 1 TypeOfNumber: International number NumberingPlanIdentification: ISDN/telephony numbering plan Address value: TSService Centre Address: Bit 8: 1 TypeOfNumber: International number NumberingPlanIdentification: ISDN/telephony numbering plan Address value: TPValidityPeriod: 63 weeks UPDATE RECORD (1) s UPDATE RECORD Short message service parameters (6F42) s Record No.: 1 Length of alpha identifier: 12 bytes Alpha Identifier: TD1 SMSCent Parameter Indicators: Bits 86: 111 TPDestination Address: Present TSService Centre Address: Present TPProtocol Identifier: Absent TPData Coding Scheme: Absent TPValidity Period: Present TPDestination Address: Bit 8: 1 TypeOfNumber: International number NumberingPlanIdentification: ISDN/telephony numbering plan Address value: TSService Centre Address: Bit 8: 1 TypeOfNumber: International number NumberingPlanIdentification: ISDN/telephony numbering plan Address value: TPValidityPeriod: 63 weeks

71 UPDATE RECORD (1) s UPDATE RECORD Short message service parameters (6F42) s Record No.: 1 Length of alpha identifier: 12 bytes Alpha Identifier: TD1 SMSCent Parameter Indicators: Bits 86: 111 TPDestination Address: Present TSService Centre Address: Present TPProtocol Identifier: Absent TPData Coding Scheme: Absent TPValidity Period: Present TPDestination Address: Bit 8: 1 TypeOfNumber: International number NumberingPlanIdentification: ISDN/telephony numbering plan Address value: TSService Centre Address: Bit 8: 1 TypeOfNumber: International number NumberingPlanIdentification: ISDN/telephony numbering plan Address value: TPValidityPeriod: 63 weeks SELECT (MSISDN) s SELECT response length 15 MSISDN (6F40) s MSISDN (2) s MSISDN (6F40) s Record No.: 2 Response parameters/data: 30 bytes

72 (3) s FF FF FF FF FF FF MSISDN (6F40) s Record No.: 3 Response parameters/data: 30 bytes FF FF FF FF FF FF SELECT (ADN) s SELECT response length 15 Abbreviated dialling numbers (6F3A) s Abbreviated dialling numbers (1) s Abbreviated dialling numbers (6F3A) s Record No.: 1 Response parameters/data: 30 bytes FF FF FF FF FF FF (2) s

73 Abbreviated dialling numbers (6F3A) s Record No.: 2 Length of alpha identifier: 16 characters Alpha identifier: Auskunft Length of BCD number: 3 TON and NPI Bit 8: 1 Type Of Number: Unknown Numbering Plan Identification: ISDN/telephony numbering plan Dialling number: 2555 Capability / Configuration Identifier: Not used Extension1 Record Identifier: Not used (3) s Abbreviated dialling numbers (6F3A) s Record No.: 3 Length of alpha identifier: 16 characters Alpha identifier: Auslandsauskunft Length of BCD number: 4 TON and NPI Bit 8: 1 Type Of Number: Unknown Numbering Plan Identification: ISDN/telephony numbering plan Dialling number: Capability / Configuration Identifier: Not used Extension1 Record Identifier: Not used (4) s Abbreviated dialling numbers (6F3A) s Record No.: 4 Response parameters/data: 30 bytes

74 (5) s FF FF FF FF FF FF Abbreviated dialling numbers (6F3A) s Record No.: 5 Length of alpha identifier: 16 characters Alpha identifier: Augustin Susanne Length of BCD number: 7 TON and NPI Bit 8: 1 Type Of Number: International number Numbering Plan Identification: ISDN/telephony numbering plan Dialling number: Capability / Configuration Identifier: Not used Extension1 Record Identifier: Not used (6) s Abbreviated dialling numbers (6F3A) s Record No.: 6 Response parameters/data: 30 bytes FF FF FF FF FF FF (7) s Abbreviated dialling numbers (6F3A) s Record No.: 7

75 Length of alpha identifier: 16 characters Alpha identifier: Brenner Length of BCD number: 7 TON and NPI Bit 8: 1 Type Of Number: International number Numbering Plan Identification: ISDN/telephony numbering plan Dialling number: Capability / Configuration Identifier: Not used Extension1 Record Identifier: Not used (8) s Abbreviated dialling numbers (6F3A) s Record No.: 8 Length of alpha identifier: 16 characters Alpha identifier: Hirschinger Length of BCD number: 7 TON and NPI Bit 8: 1 Type Of Number: International number Numbering Plan Identification: ISDN/telephony numbering plan Dialling number: Capability / Configuration Identifier: Not used Extension1 Record Identifier: Not used (9) s Abbreviated dialling numbers (6F3A) s Record No.: 9 Response parameters/data: 30 bytes FF FF FF FF FF FF (10) s

76 Abbreviated dialling numbers (6F3A) s Record No.: 10 Response parameters/data: 30 bytes FF FF FF FF FF FF (11) s Abbreviated dialling numbers (6F3A) s Record No.: 11 Length of alpha identifier: 16 characters Alpha identifier: Kolzenburg Length of BCD number: 7 TON and NPI Bit 8: 1 Type Of Number: International number Numbering Plan Identification: ISDN/telephony numbering plan Dialling number: Capability / Configuration Identifier: Not used Extension1 Record Identifier: Not used (12) s Abbreviated dialling numbers (6F3A) s Record No.: 12 Length of alpha identifier: 16 characters Alpha identifier: Altschäfl Büro! Length of BCD number: 7 TON and NPI Bit 8: 1 Type Of Number: International number Numbering Plan Identification: ISDN/telephony numbering plan Dialling number:

77 Capability / Configuration Identifier: Not used Extension1 Record Identifier: Not used (13) s Abbreviated dialling numbers (6F3A) s Record No.: 13 Length of alpha identifier: 16 characters Alpha identifier: Altschäfl (M) Length of BCD number: 7 TON and NPI Bit 8: 1 Type Of Number: International number Numbering Plan Identification: ISDN/telephony numbering plan Dialling number: Capability / Configuration Identifier: Not used Extension1 Record Identifier: Not used (14) s Abbreviated dialling numbers (6F3A) s Record No.: 14 Length of alpha identifier: 16 characters Alpha identifier: Effing (M)! Length of BCD number: 7 TON and NPI Bit 8: 1 Type Of Number: International number Numbering Plan Identification: ISDN/telephony numbering plan Dialling number: Capability / Configuration Identifier: Not used Extension1 Record Identifier: Not used (15) s Abbreviated dialling numbers (6F3A)

78 s Record No.: 15 Length of alpha identifier: 16 characters Alpha identifier: Jodat Length of BCD number: 7 TON and NPI Bit 8: 1 Type Of Number: International number Numbering Plan Identification: ISDN/telephony numbering plan Dialling number: Capability / Configuration Identifier: Not used Extension1 Record Identifier: Not used (16) s Abbreviated dialling numbers (6F3A) s Record No.: 16 Length of alpha identifier: 16 characters Alpha identifier: Hirschinger (M) Length of BCD number: 7 TON and NPI Bit 8: 1 Type Of Number: International number Numbering Plan Identification: ISDN/telephony numbering plan Dialling number: Capability / Configuration Identifier: Not used Extension1 Record Identifier: Not used (17) s Abbreviated dialling numbers (6F3A) s Record No.: 17 Length of alpha identifier: Alpha identifier: Dobo Length of BCD number: 7 TON and NPI Bit 8: 1 16 characters

79 Type Of Number: International number Numbering Plan Identification: ISDN/telephony numbering plan Dialling number: Capability / Configuration Identifier: Not used Extension1 Record Identifier: Not used (18) s Abbreviated dialling numbers (6F3A) s Record No.: 18 Length of alpha identifier: 16 characters Alpha identifier: Daksiewicz Length of BCD number: 7 TON and NPI Bit 8: 1 Type Of Number: International number Numbering Plan Identification: ISDN/telephony numbering plan Dialling number: Capability / Configuration Identifier: Not used Extension1 Record Identifier: Not used (19) s Abbreviated dialling numbers (6F3A) s Record No.: 19 Length of alpha identifier: 16 characters Alpha identifier: Horak (M) Length of BCD number: 7 TON and NPI Bit 8: 1 Type Of Number: International number Numbering Plan Identification: ISDN/telephony numbering plan Dialling number: Capability / Configuration Identifier: Not used Extension1 Record Identifier: Not used (20) s

80 Abbreviated dialling numbers (6F3A) s Record No.: 20 Length of alpha identifier: 16 characters Alpha identifier: Jodat (M) Length of BCD number: 7 TON and NPI Bit 8: 1 Type Of Number: International number Numbering Plan Identification: ISDN/telephony numbering plan Dialling number: Capability / Configuration Identifier: Not used Extension1 Record Identifier: Not used (21) s Abbreviated dialling numbers (6F3A) s Record No.: 21 Response parameters/data: 30 bytes FF FF FF FF FF FF (22) s Abbreviated dialling numbers (6F3A) s Record No.: 22 Length of alpha identifier: 16 characters Alpha identifier: MacDonald (M) Length of BCD number: 7 TON and NPI Bit 8: 1 Type Of Number: International number Numbering Plan Identification: ISDN/telephony numbering plan Dialling number:

81 Capability / Configuration Identifier: Not used Extension1 Record Identifier: Not used (23) s Abbreviated dialling numbers (6F3A) s Record No.: 23 Length of alpha identifier: 16 characters Alpha identifier: Meyer (M) Length of BCD number: 7 TON and NPI Bit 8: 1 Type Of Number: International number Numbering Plan Identification: ISDN/telephony numbering plan Dialling number: Capability / Configuration Identifier: Not used Extension1 Record Identifier: Not used (24) s Abbreviated dialling numbers (6F3A) s Record No.: 24 Length of alpha identifier: 16 characters Alpha identifier: Moder U. (M) Length of BCD number: 8 TON and NPI Bit 8: 1 Type Of Number: International number Numbering Plan Identification: ISDN/telephony numbering plan Dialling number: Capability / Configuration Identifier: Not used Extension1 Record Identifier: Not used (25) s Abbreviated dialling numbers (6F3A)

82 s Record No.: 25 Response parameters/data: (26) s 30 bytes FF FF FF FF FF FF Abbreviated dialling numbers (6F3A) s Record No.: 26 Response parameters/data: 30 bytes FF FF FF FF FF FF (27) s Abbreviated dialling numbers (6F3A) s Record No.: 27 Response parameters/data: 30 bytes FF FF FF FF FF FF (28) s Abbreviated dialling numbers (6F3A) s Record No.: 28

83 Length of alpha identifier: 16 characters Alpha identifier: Richter (M) Length of BCD number: 7 TON and NPI Bit 8: 1 Type Of Number: International number Numbering Plan Identification: ISDN/telephony numbering plan Dialling number: Capability / Configuration Identifier: Not used Extension1 Record Identifier: Not used (29) s Abbreviated dialling numbers (6F3A) s Record No.: 29 Length of alpha identifier: 16 characters Alpha identifier: MobilboxAbfrage Length of BCD number: 3 TON and NPI Bit 8: 1 Type Of Number: Unknown Numbering Plan Identification: ISDN/telephony numbering plan Dialling number: 3311 Capability / Configuration Identifier: Not used Extension1 Record Identifier: Not used (30) s Record No.: 30 Abbreviated dialling numbers (6F3A) s Length of alpha identifier: 16 characters Alpha identifier: MobilboxAusland Length of BCD number: 7 TON and NPI Bit 8: 1 Type Of Number: International number Numbering Plan Identification: ISDN/telephony numbering plan Dialling number: Capability / Configuration Identifier: Not used

84 Extension1 Record Identifier: Not used (31) s Abbreviated dialling numbers (6F3A) s Record No.: 31 Length of alpha identifier: 16 characters Alpha identifier: Notruf Length of BCD number: 3 TON and NPI Bit 8: 1 Type Of Number: Unknown Numbering Plan Identification: ISDN/telephony numbering plan Dialling number: 112 Capability / Configuration Identifier: Not used Extension1 Record Identifier: Not used (32) s Record No.: 32 Abbreviated dialling numbers (6F3A) s Length of alpha identifier: 16 characters Alpha identifier: Vedder (M) Length of BCD number: 7 TON and NPI Bit 8: 1 Type Of Number: International number Numbering Plan Identification: ISDN/telephony numbering plan Dialling number: Capability / Configuration Identifier: Not used Extension1 Record Identifier: Not used (33) s Abbreviated dialling numbers (6F3A) s

85 Record No.: 33 Length of alpha identifier: 16 characters Alpha identifier: Weikmann (M) Length of BCD number: 7 TON and NPI Bit 8: 1 Type Of Number: International number Numbering Plan Identification: ISDN/telephony numbering plan Dialling number: Capability / Configuration Identifier: Not used Extension1 Record Identifier: Not used (34) s Record No.: 34 Abbreviated dialling numbers (6F3A) s Response parameters/data: 30 bytes FF FF FF FF FF FF (35) s Abbreviated dialling numbers (6F3A) s Record No.: 35 Length of alpha identifier: 16 characters Alpha identifier: Holzbauer U. (M) Length of BCD number: 7 TON and NPI Bit 8: 1 Type Of Number: International number Numbering Plan Identification: ISDN/telephony numbering plan Dialling number: Capability / Configuration Identifier: Not used Extension1 Record Identifier: Not used (36) s

86 Abbreviated dialling numbers (6F3A) s Record No.: 36 Length of alpha identifier: Alpha identifier: 16 characters Holzbauer R. (M) Length of BCD number: 7 TON and NPI Bit 8: 1 Type Of Number: International number Numbering Plan Identification: ISDN/telephony numbering plan Dialling number: Capability / Configuration Identifier: Not used Extension1 Record Identifier: Not used (37) s Abbreviated dialling numbers (6F3A) s Record No.: 37 Response parameters/data: 30 bytes FF FF FF FF FF FF (38) s Abbreviated dialling numbers (6F3A) s Record No.: 38 Length of alpha identifier: 16 characters Alpha identifier: Hausmann (M) Length of BCD number: 7 TON and NPI Bit 8: 1 Type Of Number: International number

87 Numbering Plan Identification: ISDN/telephony numbering plan Dialling number: Capability / Configuration Identifier: Not used Extension1 Record Identifier: Not used (39) s Abbreviated dialling numbers (6F3A) s Record No.: 39 Length of alpha identifier: 16 characters Alpha identifier: Moder G. (M) Length of BCD number: 7 TON and NPI Bit 8: 1 Type Of Number: International number Numbering Plan Identification: ISDN/telephony numbering plan Dialling number: Capability / Configuration Identifier: Not used Extension1 Record Identifier: Not used (40) s Abbreviated dialling numbers (6F3A) s Record No.: 40 Length of alpha identifier: 16 characters Alpha identifier: Daksiewicz (M) Length of BCD number: 7 TON and NPI Bit 8: 1 Type Of Number: International number Numbering Plan Identification: ISDN/telephony numbering plan Dialling number: Capability / Configuration Identifier: Not used Extension1 Record Identifier: Not used (41) s

88 Abbreviated dialling numbers (6F3A) s Record No.: 41 Response parameters/data: 30 bytes FF FF FF FF FF FF (42) s Abbreviated dialling numbers (6F3A) s Record No.: 42 Response parameters/data: 30 bytes FF FF FF FF FF FF (43) s Abbreviated dialling numbers (6F3A) s Record No.: 43 Length of alpha identifier: 16 characters Alpha identifier: Rankl A&W Length of BCD number: 7 TON and NPI Bit 8: 1 Type Of Number: International number Numbering Plan Identification: ISDN/telephony numbering plan Dialling number: Capability / Configuration Identifier: Not used Extension1 Record Identifier: Not used (44) s

89 Abbreviated dialling numbers (6F3A) s Record No.: 44 Length of alpha identifier: 16 characters Alpha identifier: Horak Length of BCD number: 7 TON and NPI Bit 8: 1 Type Of Number: International number Numbering Plan Identification: ISDN/telephony numbering plan Dialling number: Capability / Configuration Identifier: Not used Extension1 Record Identifier: Not used (45) s Abbreviated dialling numbers (6F3A) s Record No.: 45 Length of alpha identifier: 16 characters Alpha identifier: Rankl F. Length of BCD number: 7 TON and NPI Bit 8: 1 Type Of Number: International number Numbering Plan Identification: ISDN/telephony numbering plan Dialling number: Capability / Configuration Identifier: Not used Extension1 Record Identifier: Not used (46) s Abbreviated dialling numbers (6F3A) s Record No.: 46

90 Length of alpha identifier: 16 characters Alpha identifier: Rankl W., Büro Length of BCD number: 7 TON and NPI Bit 8: 1 Type Of Number: International number Numbering Plan Identification: ISDN/telephony numbering plan Dialling number: Capability / Configuration Identifier: Not used Extension1 Record Identifier: Not used (47) s Abbreviated dialling numbers (6F3A) s Record No.: 47 Length of alpha identifier: 16 characters Alpha identifier: Riechmann C. Length of BCD number: 7 TON and NPI Bit 8: 1 Type Of Number: International number Numbering Plan Identification: ISDN/telephony numbering plan Dialling number: Capability / Configuration Identifier: Not used Extension1 Record Identifier: Not used (48) s Abbreviated dialling numbers (6F3A) s Record No.: 48 Length of alpha identifier: 16 characters Alpha identifier: Schott C. Length of BCD number: 7 TON and NPI Bit 8: 1 Type Of Number: International number Numbering Plan Identification: ISDN/telephony numbering plan Dialling number: Capability / Configuration Identifier: Not used Extension1 Record Identifier: Not used

91 (49) s Abbreviated dialling numbers (6F3A) s Record No.: 49 Length of alpha identifier: 16 characters Alpha identifier: Steinke Length of BCD number: 7 TON and NPI Bit 8: 1 Type Of Number: International number Numbering Plan Identification: ISDN/telephony numbering plan Dialling number: Capability / Configuration Identifier: Not used Extension1 Record Identifier: Not used (50) s Abbreviated dialling numbers (6F3A) s Record No.: 50 Length of alpha identifier: 16 characters Alpha identifier: Süßmuth Length of BCD number: 7 TON and NPI Bit 8: 1 Type Of Number: International number Numbering Plan Identification: ISDN/telephony numbering plan Dialling number: Capability / Configuration Identifier: Not used Extension1 Record Identifier: Not used (51) s Abbreviated dialling numbers (6F3A) s

92 Record No.: 51 Length of alpha identifier: 16 characters Alpha identifier: Thinnes Length of BCD number: 7 TON and NPI Bit 8: 1 Type Of Number: International number Numbering Plan Identification: ISDN/telephony numbering plan Dialling number: Capability / Configuration Identifier: Not used Extension1 Record Identifier: Not used (52) s Abbreviated dialling numbers (6F3A) s Record No.: 52 Length of alpha identifier: 16 characters Alpha identifier: Weiß Length of BCD number: 7 TON and NPI Bit 8: 1 Type Of Number: International number Numbering Plan Identification: ISDN/telephony numbering plan Dialling number: Capability / Configuration Identifier: Not used Extension1 Record Identifier: Not used (53) s Abbreviated dialling numbers (6F3A) s Record No.: 53 Length of alpha identifier: 16 characters Alpha identifier: Weiß, daheim Length of BCD number: 6 TON and NPI Bit 8: 1 Type Of Number: International number Numbering Plan Identification: ISDN/telephony numbering plan

93 Dialling number: Capability / Configuration Identifier: Not used Extension1 Record Identifier: Not used (54) s Abbreviated dialling numbers (6F3A) s Record No.: 54 Response parameters/data: 30 bytes FF FF FF FF FF FF (55) s Abbreviated dialling numbers (6F3A) s Record No.: 55 Response parameters/data: 30 bytes FF FF FF FF FF FF (56) s Abbreviated dialling numbers (6F3A) s Record No.: 56 Response parameters/data: 30 bytes

94 FF FF FF FF FF FF (57) s Abbreviated dialling numbers (6F3A) s Record No.: 57 Response parameters/data: 30 bytes FF FF FF FF FF FF (58) s Abbreviated dialling numbers (6F3A) s Record No.: 58 Response parameters/data: 30 bytes FF FF FF FF FF FF (59) s Abbreviated dialling numbers (6F3A) s Record No.: 59 Response parameters/data: 30 bytes FF FF FF FF FF FF

95 (60) s Abbreviated dialling numbers (6F3A) s Record No.: 60 Response parameters/data: 30 bytes FF FF FF FF FF FF (61) s Abbreviated dialling numbers (6F3A) s Record No.: 61 Response parameters/data: 30 bytes FF FF FF FF FF FF (62) s Abbreviated dialling numbers (6F3A) s Record No.: 62 Response parameters/data: 30 bytes FF FF FF FF FF FF (63) s

96 Record No.: 63 Abbreviated dialling numbers (6F3A) s Response parameters/data: 30 bytes FF FF FF FF FF FF (64) s Abbreviated dialling numbers (6F3A) s Record No.: 64 Response parameters/data: 30 bytes FF FF FF FF FF FF (65) s Abbreviated dialling numbers (6F3A) s Record No.: 65 Response parameters/data: 30 bytes FF FF FF FF FF FF (66) s

97 Abbreviated dialling numbers (6F3A) s Record No.: 66 Response parameters/data: 30 bytes FF FF FF FF FF FF (67) s Abbreviated dialling numbers (6F3A) s Record No.: 67 Response parameters/data: 30 bytes FF FF FF FF FF FF (68) s Abbreviated dialling numbers (6F3A) s Record No.: 68 Response parameters/data: 30 bytes FF FF FF FF FF FF (69) s Abbreviated dialling numbers (6F3A)

98 s Record No.: 69 Response parameters/data: 30 bytes FF FF FF FF FF FF (70) s Abbreviated dialling numbers (6F3A) s Record No.: 70 Response parameters/data: 30 bytes FF FF FF FF FF FF (71) s Abbreviated dialling numbers (6F3A) s Record No.: 71 Response parameters/data: 30 bytes FF FF FF FF FF FF (72) s Abbreviated dialling numbers (6F3A) s

99 Record No.: 72 Response parameters/data: 30 bytes FF FF FF FF FF FF (73) s Record No.: 73 Abbreviated dialling numbers (6F3A) s Response parameters/data: 30 bytes FF FF FF FF FF FF (74) s Abbreviated dialling numbers (6F3A) s Record No.: 74 Response parameters/data: 30 bytes FF FF FF FF FF FF (75) s Abbreviated dialling numbers (6F3A) s Record No.: 75

100 Response parameters/data: 30 bytes FF FF FF FF FF FF (76) s Abbreviated dialling numbers (6F3A) s Record No.: 76 Response parameters/data: 30 bytes FF FF FF FF FF FF (77) s Abbreviated dialling numbers (6F3A) s Record No.: 77 Response parameters/data: 30 bytes FF FF FF FF FF FF (78) s Abbreviated dialling numbers (6F3A) s Record No.: 78 Response parameters/data: 30 bytes

101 (79) s FF FF FF FF FF FF Abbreviated dialling numbers (6F3A) s Record No.: 79 Response parameters/data: 30 bytes FF FF FF FF FF FF (80) s Abbreviated dialling numbers (6F3A) s Record No.: 80 Response parameters/data: 30 bytes FF FF FF FF FF FF (81) s Abbreviated dialling numbers (6F3A) s Record No.: 81 Response parameters/data: 30 bytes FF FF FF FF FF FF

102 (82) s Abbreviated dialling numbers (6F3A) s Record No.: 82 Response parameters/data: 30 bytes FF FF FF FF FF FF (83) s Abbreviated dialling numbers (6F3A) s Record No.: 83 Response parameters/data: 30 bytes FF FF FF FF FF FF (84) s Abbreviated dialling numbers (6F3A) s Record No.: 84 Response parameters/data: 30 bytes FF FF FF FF FF FF (85) s

103 Abbreviated dialling numbers (6F3A) s Record No.: 85 Response parameters/data: 30 bytes FF FF FF FF FF FF (86) s Abbreviated dialling numbers (6F3A) s Record No.: 86 Response parameters/data: 30 bytes FF FF FF FF FF FF (87) s Abbreviated dialling numbers (6F3A) s Record No.: 87 Response parameters/data: 30 bytes FF FF FF FF FF FF (88) s

104 Abbreviated dialling numbers (6F3A) s Record No.: 88 Response parameters/data: 30 bytes FF FF FF FF FF FF (89) s Abbreviated dialling numbers (6F3A) s Record No.: 89 Response parameters/data: 30 bytes FF FF FF FF FF FF (90) s Abbreviated dialling numbers (6F3A) s Record No.: 90 Response parameters/data: 30 bytes FF FF FF FF FF FF (91) s Abbreviated dialling numbers (6F3A)

105 s Record No.: 91 Response parameters/data: 30 bytes FF FF FF FF FF FF (92) s Abbreviated dialling numbers (6F3A) s Record No.: 92 Response parameters/data: 30 bytes FF FF FF FF FF FF (93) s Abbreviated dialling numbers (6F3A) s Record No.: 93 Response parameters/data: (94) s 30 bytes FF FF FF FF FF FF Abbreviated dialling numbers (6F3A) s

106 Record No.: 94 Response parameters/data: 30 bytes FF FF FF FF FF FF (95) s Abbreviated dialling numbers (6F3A) s Record No.: 95 Response parameters/data: 30 bytes FF FF FF FF FF FF (96) s Record No.: 96 Abbreviated dialling numbers (6F3A) s Response parameters/data: 30 bytes FF FF FF FF FF FF (97) s Abbreviated dialling numbers (6F3A) s Record No.: 97

107 Response parameters/data: 30 bytes FF FF FF FF FF FF (98) s Abbreviated dialling numbers (6F3A) s Record No.: 98 Response parameters/data: 30 bytes FF FF FF FF FF FF (99) s Abbreviated dialling numbers (6F3A) s Record No.: 99 Response parameters/data: 30 bytes FF FF FF FF FF FF (100) s Abbreviated dialling numbers (6F3A) s Record No.: 100 Response parameters/data: 30 bytes

108 (101) s FF FF FF FF FF FF Abbreviated dialling numbers (6F3A) s Record No.: 101 Response parameters/data: 30 bytes FF FF FF FF FF FF (102) s Abbreviated dialling numbers (6F3A) s Record No.: 102 Response parameters/data: 30 bytes FF FF FF FF FF FF (103) s Abbreviated dialling numbers (6F3A) s Record No.: 103 Response parameters/data: 30 bytes FF FF FF FF FF FF

109 (104) s Abbreviated dialling numbers (6F3A) s Record No.: 104 Response parameters/data: 30 bytes FF FF FF FF FF FF (105) s Abbreviated dialling numbers (6F3A) s Record No.: 105 Response parameters/data: 30 bytes FF FF FF FF FF FF (106) s Abbreviated dialling numbers (6F3A) s Record No.: 106 Response parameters/data: 30 bytes FF FF FF FF FF FF (107) s

110 Abbreviated dialling numbers (6F3A) s Record No.: 107 Response parameters/data: 30 bytes FF FF FF FF FF FF (108) s Abbreviated dialling numbers (6F3A) s Record No.: 108 Response parameters/data: 30 bytes FF FF FF FF FF FF (109) s Abbreviated dialling numbers (6F3A) s Record No.: 109 Response parameters/data: 30 bytes FF FF FF FF FF FF (110) s

111 Abbreviated dialling numbers (6F3A) s Record No.: 110 Response parameters/data: 30 bytes FF FF FF FF FF FF (111) s Abbreviated dialling numbers (6F3A) s Record No.: 111 Response parameters/data: 30 bytes FF FF FF FF FF FF (112) s Abbreviated dialling numbers (6F3A) s Record No.: 112 Response parameters/data: 30 bytes FF FF FF FF FF FF (113) s Abbreviated dialling numbers (6F3A)

112 s Record No.: 113 Response parameters/data: 30 bytes FF FF FF FF FF FF (114) s Abbreviated dialling numbers (6F3A) s Record No.: 114 Response parameters/data: 30 bytes FF FF FF FF FF FF (115) s Abbreviated dialling numbers (6F3A) s Record No.: 115 Response parameters/data: 30 bytes FF FF FF FF FF FF (116) s Abbreviated dialling numbers (6F3A) s

113 Record No.: 116 Response parameters/data: (117) s 30 bytes FF FF FF FF FF FF Abbreviated dialling numbers (6F3A) s Record No.: 117 Response parameters/data: 30 bytes FF FF FF FF FF FF (118) s Abbreviated dialling numbers (6F3A) s Record No.: 118 Response parameters/data: 30 bytes FF FF FF FF FF FF (119) s Record No.: 119 Abbreviated dialling numbers (6F3A) s Response parameters/data: 30 bytes

114 (120) s FF FF FF FF FF FF Abbreviated dialling numbers (6F3A) s Record No.: 120 Response parameters/data: 30 bytes FF FF FF FF FF FF (121) s Abbreviated dialling numbers (6F3A) s Record No.: 121 Response parameters/data: 30 bytes FF FF FF FF FF FF (122) s Abbreviated dialling numbers (6F3A) s Record No.: 122 Response parameters/data: 30 bytes

115 FF FF FF FF FF FF (123) s Abbreviated dialling numbers (6F3A) s Record No.: 123 Response parameters/data: 30 bytes FF FF FF FF FF FF (124) s Abbreviated dialling numbers (6F3A) s Record No.: 124 Response parameters/data: 30 bytes FF FF FF FF FF FF (125) s Abbreviated dialling numbers (6F3A) s Record No.: 125 Response parameters/data: 30 bytes FF FF FF FF FF FF SELECT (FDN) s

116 SELECT response length 15 Fixed dialling numbers (6F3B) s Fixed dialling numbers (1) s Fixed dialling numbers (6F3B) s Record No.: 1 Response parameters/data: 30 bytes FF FF FF FF FF FF (2) s Fixed dialling numbers (6F3B) s Record No.: 2 Response parameters/data: 30 bytes FF FF FF FF FF FF (3) s Fixed dialling numbers (6F3B) s Record No.: 3

117 Response parameters/data: 30 bytes FF FF FF FF FF FF (4) s Fixed dialling numbers (6F3B) s Record No.: 4 Response parameters/data: 30 bytes FF FF FF FF FF FF (5) s Fixed dialling numbers (6F3B) s Record No.: 5 Response parameters/data: 30 bytes FF FF FF FF FF FF (6) s Fixed dialling numbers (6F3B) s Record No.: 6 Response parameters/data: 30 bytes

118 (7) s FF FF FF FF FF FF Fixed dialling numbers (6F3B) s Record No.: 7 Response parameters/data: 30 bytes FF FF FF FF FF FF (8) s Fixed dialling numbers (6F3B) s Record No.: 8 Response parameters/data: 30 bytes FF FF FF FF FF FF (9) s Fixed dialling numbers (6F3B) s Record No.: 9 Response parameters/data: 30 bytes FF FF FF FF FF FF

119 (10) s Fixed dialling numbers (6F3B) s Record No.: 10 Response parameters/data: 30 bytes FF FF FF FF FF FF STATUS (TELECOM) s STATUS Fixed dialling numbers (6F3B) s RFU bytes 12: Memory available: 0 bytes 7F10 Type of file: Dedicated file RFU bytes 812: FA FF AA FF 01 Length of following data: 14 bytes File characteristics: Clock stop: Allowed, no preferred level Min. freq. for GSM algorithm: 13/4 MHz Technology identification: 3V Technology SIM CHV1: Enabled DFs in current directory: 0 EFs in current directory: 12 Number of CHV and admin. codes: 6 RFU byte 18: 00 CHV1 status: False presentations remaining: 3 RFU bits 75: 000 Secret code: Initialised UNBLOCK CHV1 status: False presentations remaining: 10 RFU bits 75: 000 Secret code: Initialised CHV2 status: False presentations remaining: 3 RFU bits 75: 000 Secret code: Initialised UNBLOCK CHV2 status: False presentations remaining: 10

120 RFU bits 75: 000 Secret code: Initialised RFU byte 23: 00 Reserved for admin. management: STATUS (TELECOM) s STATUS Fixed dialling numbers (6F3B) s RFU bytes 12: Memory available: 0 bytes 7F10 Type of file: Dedicated file RFU bytes 812: FA FF AA FF 01 Length of following data: 14 bytes File characteristics: Clock stop: Allowed, no preferred level Min. freq. for GSM algorithm: 13/4 MHz Technology identification: 3V Technology SIM CHV1: Enabled DFs in current directory: 0 EFs in current directory: 12 Number of CHV and admin. codes: 6 RFU byte 18: 00 CHV1 status: False presentations remaining: 3 RFU bits 75: 000 Secret code: Initialised UNBLOCK CHV1 status: False presentations remaining: 10 RFU bits 75: 000 Secret code: Initialised CHV2 status: False presentations remaining: 3 RFU bits 75: 000 Secret code: Initialised UNBLOCK CHV2 status: False presentations remaining: 10 RFU bits 75: 000 Secret code: Initialised RFU byte 23: 00 Reserved for admin. management: SELECT (SMSS) s SELECT response length 15 SMS status (6F43) s

121 SMS status UPDATE BINARY (Offset 0, Len 2) s UPDATE BINARY SMS status (6F43) s Offset: 0 Length: 2 Last used TPMessages Reference: 105 SMS "Memory Capacity Exceeded" Notification Flag: Bits 82: Bit 1: Memory capacity available SELECT (GSM) s SELECT response length 27 GSM (7F20) None s GSM RUN GSM ALGORITHM () s RUN GSM ALGORITHM GSM (7F20) None s RAND: 2B A 9C 95 6F 2E EC CD EC 4E 73 SRES: C B3 Cipher Key Kc: 34 3B 7D E0 A9 6E C4 00 SELECT (Kc) s SELECT response length 15 GSM (7F20) Ciphering key Kc (6F20) s Ciphering key Kc UPDATE BINARY (Offset 0, Len 9) s

122 UPDATE BINARY GSM (7F20) Ciphering key Kc (6F20) s Offset: 0 Length: 9 Ciphering key Kc: 343B7DE0A96EC400 Ciphering key sequence number: Bits 84: Ciphering key sequence number: 3 SELECT (LOCI) s SELECT response length 15 GSM (7F20) Location information (6F7E) s Location information UPDATE BINARY (Offset 0, Len 11) s UPDATE BINARY GSM (7F20) Location information (6F7E) s Offset: 0 Length: 11 TMSITemporary Mobile Subscriber BD A8 86 9B Identity: LAILocation Area Information: MCC 262, MNC 01, LAC 8707 TMSI TIME: Timer is not running Location update status: RFU bits 84: Location update status: Updated STATUS (GSM) s STATUS GSM (7F20) Location information (6F7E) s RFU bytes 12: 00 00

123 Memory available: 0 bytes 7F20 Type of file: Dedicated file RFU bytes 812: FA FF AA FF 01 Length of following data: 14 bytes File characteristics: Clock stop: Allowed, no preferred level Min. freq. for GSM algorithm: 13/4 MHz Technology identification: 3V Technology SIM CHV1: Enabled DFs in current directory: 0 EFs in current directory: 26 Number of CHV and admin. codes: 6 RFU byte 18: 00 CHV1 status: False presentations remaining: 3 RFU bits 75: 000 Secret code: Initialised UNBLOCK CHV1 status: False presentations remaining: 10 RFU bits 75: 000 Secret code: Initialised CHV2 status: False presentations remaining: 3 RFU bits 75: 000 Secret code: Initialised UNBLOCK CHV2 status: False presentations remaining: 10 RFU bits 75: 000 Secret code: Initialised RFU byte 23: 00 Reserved for admin. management: RUN GSM ALGORITHM () s RAND: RUN GSM ALGORITHM GSM (7F20) Location information (6F7E) s 05 E4 5E B D AF DA 6A CC 5D E1 9A EA SRES: 54 B5 AC DD Cipher Key Kc: D4 F1 98 ED 83 9E SELECT (KcGPRS) s SELECT response length 15 GSM (7F20) GPRS Ciphering key KcGPRS (6F52) s

124 GPRS Ciphering key KcGPRS UPDATE BINARY (Offset 0, Len 9) s UPDATE BINARY GSM (7F20) GPRS Ciphering key KcGPRS (6F52) s Offset: 0 Length: 9 Ciphering key KcGPRS: D4F198ED839E9800 Ciphering key sequence number: Bits 84: Ciphering key sequence number: 0 SELECT (LOCIGPRS) s SELECT response length 15 GSM (7F20) GPRS location information (6F53) s GPRS location information UPDATE BINARY (Offset 0, Len 14) s UPDATE BINARY GSM (7F20) GPRS location information (6F53) s Offset: 0 Length: 14 PTMSI: C0 00 0E 2A PTMSI Signature Value: FF FF FF RAI Routing Area Information: MCC 262, MNC 01, LAC 8707, RAC 01 Routing Area update status: RFU bits 84: Routing Area update status: Updated STATUS (GSM) s STATUS GSM (7F20) GPRS location information (6F53) s

125 RFU bytes 12: Memory available: 0 bytes 7F20 Type of file: Dedicated file RFU bytes 812: FA FF AA FF 01 Length of following data: 14 bytes File characteristics: Clock stop: Allowed, no preferred level Min. freq. for GSM algorithm: 13/4 MHz Technology identification: 3V Technology SIM CHV1: Enabled DFs in current directory: 0 EFs in current directory: 26 Number of CHV and admin. codes: 6 RFU byte 18: 00 CHV1 status: False presentations remaining: 3 RFU bits 75: 000 Secret code: Initialised UNBLOCK CHV1 status: False presentations remaining: 10 RFU bits 75: 000 Secret code: Initialised CHV2 status: False presentations remaining: 3 RFU bits 75: 000 Secret code: Initialised UNBLOCK CHV2 status: False presentations remaining: 10 RFU bits 75: 000 Secret code: Initialised RFU byte 23: 00 Reserved for admin. management: STATUS (GSM) s STATUS GSM (7F20) GPRS location information (6F53) s RFU bytes 12: Memory available: 0 bytes 7F20 Type of file: Dedicated file RFU bytes 812: FA FF AA FF 01 Length of following data: 14 bytes File characteristics: Clock stop: Allowed, no preferred level Min. freq. for GSM algorithm: 13/4 MHz Technology identification: 3V Technology SIM CHV1: Enabled DFs in current directory: 0 EFs in current directory: 26

126 Number of CHV and admin. codes: 6 RFU byte 18: 00 CHV1 status: False presentations remaining: 3 RFU bits 75: 000 Secret code: Initialised UNBLOCK CHV1 status: False presentations remaining: 10 RFU bits 75: 000 Secret code: Initialised CHV2 status: False presentations remaining: 3 RFU bits 75: 000 Secret code: Initialised UNBLOCK CHV2 status: False presentations remaining: 10 RFU bits 75: 000 Secret code: Initialised RFU byte 23: 00 Reserved for admin. management: STATUS (GSM) s STATUS GSM (7F20) GPRS location information (6F53) s RFU bytes 12: Memory available: 0 bytes 7F20 Type of file: Dedicated file RFU bytes 812: FA FF AA FF 01 Length of following data: 14 bytes File characteristics: Clock stop: Allowed, no preferred level Min. freq. for GSM algorithm: 13/4 MHz Technology identification: 3V Technology SIM CHV1: Enabled DFs in current directory: 0 EFs in current directory: 26 Number of CHV and admin. codes: 6 RFU byte 18: 00 CHV1 status: False presentations remaining: 3 RFU bits 75: 000 Secret code: Initialised UNBLOCK CHV1 status: False presentations remaining: 10 RFU bits 75: 000 Secret code: Initialised CHV2 status: False presentations remaining: 3 RFU bits 75: 000

127 Secret code: Initialised UNBLOCK CHV2 status: False presentations remaining: 10 RFU bits 75: 000 Secret code: Initialised RFU byte 23: 00 Reserved for admin. management: STATUS (GSM) s STATUS GSM (7F20) GPRS location information (6F53) s RFU bytes 12: Memory available: 0 bytes 7F20 Type of file: Dedicated file RFU bytes 812: FA FF AA FF 01 Length of following data: 14 bytes File characteristics: Clock stop: Allowed, no preferred level Min. freq. for GSM algorithm: 13/4 MHz Technology identification: 3V Technology SIM CHV1: Enabled DFs in current directory: 0 EFs in current directory: 26 Number of CHV and admin. codes: 6 RFU byte 18: 00 CHV1 status: False presentations remaining: 3 RFU bits 75: 000 Secret code: Initialised UNBLOCK CHV1 status: False presentations remaining: 10 RFU bits 75: 000 Secret code: Initialised CHV2 status: False presentations remaining: 3 RFU bits 75: 000 Secret code: Initialised UNBLOCK CHV2 status: False presentations remaining: 10 RFU bits 75: 000 Secret code: Initialised RFU byte 23: 00 Reserved for admin. management: STATUS (GSM) s STATUS

128 GSM (7F20) GPRS location information (6F53) s RFU bytes 12: Memory available: 0 bytes 7F20 Type of file: Dedicated file RFU bytes 812: FA FF AA FF 01 Length of following data: 14 bytes File characteristics: Clock stop: Allowed, no preferred level Min. freq. for GSM algorithm: 13/4 MHz Technology identification: 3V Technology SIM CHV1: Enabled DFs in current directory: 0 EFs in current directory: 26 Number of CHV and admin. codes: 6 RFU byte 18: 00 CHV1 status: False presentations remaining: 3 RFU bits 75: 000 Secret code: Initialised UNBLOCK CHV1 status: False presentations remaining: 10 RFU bits 75: 000 Secret code: Initialised CHV2 status: False presentations remaining: 3 RFU bits 75: 000 Secret code: Initialised UNBLOCK CHV2 status: False presentations remaining: 10 RFU bits 75: 000 Secret code: Initialised RFU byte 23: 00 Reserved for admin. management: STATUS (GSM) s STATUS GSM (7F20) GPRS location information (6F53) s RFU bytes 12: Memory available: 0 bytes 7F20 Type of file: Dedicated file RFU bytes 812: FA FF AA FF 01 Length of following data: 14 bytes File characteristics: Clock stop: Allowed, no preferred level Min. freq. for GSM algorithm: 13/4 MHz

129 Technology identification: 3V Technology SIM CHV1: Enabled DFs in current directory: 0 EFs in current directory: 26 Number of CHV and admin. codes: 6 RFU byte 18: 00 CHV1 status: False presentations remaining: 3 RFU bits 75: 000 Secret code: Initialised UNBLOCK CHV1 status: False presentations remaining: 10 RFU bits 75: 000 Secret code: Initialised CHV2 status: False presentations remaining: 3 RFU bits 75: 000 Secret code: Initialised UNBLOCK CHV2 status: False presentations remaining: 10 RFU bits 75: 000 Secret code: Initialised RFU byte 23: 00 Reserved for admin. management: STATUS (GSM) s STATUS GSM (7F20) GPRS location information (6F53) s RFU bytes 12: Memory available: 0 bytes 7F20 Type of file: Dedicated file RFU bytes 812: FA FF AA FF 01 Length of following data: 14 bytes File characteristics: Clock stop: Allowed, no preferred level Min. freq. for GSM algorithm: 13/4 MHz Technology identification: 3V Technology SIM CHV1: Enabled DFs in current directory: 0 EFs in current directory: 26 Number of CHV and admin. codes: 6 RFU byte 18: 00 CHV1 status: False presentations remaining: 3 RFU bits 75: 000 Secret code: Initialised UNBLOCK CHV1 status: False presentations remaining: 10 RFU bits 75: 000

130 Secret code: Initialised CHV2 status: False presentations remaining: 3 RFU bits 75: 000 Secret code: Initialised UNBLOCK CHV2 status: False presentations remaining: 10 RFU bits 75: 000 Secret code: Initialised RFU byte 23: 00 Reserved for admin. management: STATUS (GSM) s STATUS GSM (7F20) GPRS location information (6F53) s RFU bytes 12: Memory available: 0 bytes 7F20 Type of file: Dedicated file RFU bytes 812: FA FF AA FF 01 Length of following data: 14 bytes File characteristics: Clock stop: Allowed, no preferred level Min. freq. for GSM algorithm: 13/4 MHz Technology identification: 3V Technology SIM CHV1: Enabled DFs in current directory: 0 EFs in current directory: 26 Number of CHV and admin. codes: 6 RFU byte 18: 00 CHV1 status: False presentations remaining: 3 RFU bits 75: 000 Secret code: Initialised UNBLOCK CHV1 status: False presentations remaining: 10 RFU bits 75: 000 Secret code: Initialised CHV2 status: False presentations remaining: 3 RFU bits 75: 000 Secret code: Initialised UNBLOCK CHV2 status: False presentations remaining: 10 RFU bits 75: 000 Secret code: Initialised RFU byte 23: 00 Reserved for admin. management: STATUS (GSM) s

131 STATUS GSM (7F20) GPRS location information (6F53) s RFU bytes 12: Memory available: 0 bytes 7F20 Type of file: Dedicated file RFU bytes 812: FA FF AA FF 01 Length of following data: 14 bytes File characteristics: Clock stop: Allowed, no preferred level Min. freq. for GSM algorithm: 13/4 MHz Technology identification: 3V Technology SIM CHV1: Enabled DFs in current directory: 0 EFs in current directory: 26 Number of CHV and admin. codes: 6 RFU byte 18: 00 CHV1 status: False presentations remaining: 3 RFU bits 75: 000 Secret code: Initialised UNBLOCK CHV1 status: False presentations remaining: 10 RFU bits 75: 000 Secret code: Initialised CHV2 status: False presentations remaining: 3 RFU bits 75: 000 Secret code: Initialised UNBLOCK CHV2 status: False presentations remaining: 10 RFU bits 75: 000 Secret code: Initialised RFU byte 23: 00 Reserved for admin. management: ENVELOPE (MENU SELECTION) s ENVELOPE Proactive SIM command pending response length 189 GSM (7F20) GPRS location information (6F53) s MENU SELECTION Device Identity Source: Keypad Destination: SIM Item Identifier Identifier of item chosen: 01

132 FETCH (SELECT ITEM) s FETCH GSM (7F20) GPRS location information (6F53) s Proactive SIM Command Command Details Command Number: 1 Command Name: SELECT ITEM Command Qualifier: presentation type is not specified, no selection preference, no help information available Device Identity Source: SIM Destination: ME Alpha Identifier: Rubriken Item Identifier of item: 01 Text String: News Item Identifier of item: 02 Text String: BörsenInfos Item Identifier of item: 03 Text String: Aktien D Item Identifier of item: 04 Text String: Aktien INT Item Identifier of item: 05 Text String: Sport Item Identifier of item: 06 Text String: 1.BLClubs Item Identifier of item: 07 Text String: Unterhaltung Item Identifier of item: 08 Text String: Horoskop Item Identifier of item: 09 Text String: Wetter D Item Identifier of item: 0A Text String: Wetter INT Item Identifier of item: 0B Text String: Wetter spez Item Identifier of item: 0D Text String: Mehr Infos Item

133 Identifier of item: 0E Text String: Extras Item Identifier of item: 0F Text String: Hilfe Item Identifier of item: 10 Text String: Info TERMINAL RESPONSE (SELECT ITEM) s TERMINAL RESPONSE Proactive SIM command pending response length 89 GSM (7F20) GPRS location information (6F53) s Command Details Command Number: 1 Command Name: SELECT ITEM Command Qualifier: presentation type is not specified, no selection preference, no help information available Device Identity Source: ME Destination: SIM Result General Result: Command performed successfully Item Identifier Identifier of item chosen: 03 FETCH (SELECT ITEM) s FETCH GSM (7F20) GPRS location information (6F53) s Proactive SIM Command Command Details Command Number: 1 Command Name: SELECT ITEM Command Qualifier: presentation type is not specified, no selection preference, no help information available Device Identity Source: SIM Destination: ME Alpha Identifier: Aktien D Item Identifier of item: 01 Text String: DAX1 Item Identifier of item: 02 Text String: DAX2

134 Item Identifier of item: 03 Text String: MDAX1 Item Identifier of item: 04 Text String: MDAX2 Item Identifier of item: 05 Text String: MDAX3 Item Identifier of item: 07 Text String: NMarkt1 Item Identifier of item: 08 Text String: NMarkt2 Item Identifier of item: 09 Text String: NMarkt3 TERMINAL RESPONSE (SELECT ITEM) s TERMINAL RESPONSE Proactive SIM command pending response length 189 GSM (7F20) GPRS location information (6F53) s Command Details Command Number: 1 Command Name: SELECT ITEM Command Qualifier: presentation type is not specified, no selection preference, no help information available Device Identity Source: ME Destination: SIM Result General Result: Backward move in the proactive SIM session requested by the user Item Identifier Identifier of item chosen: 00 FETCH (SELECT ITEM) s FETCH GSM (7F20) GPRS location information (6F53) s Proactive SIM Command Command Details Command Number: 1 Command Name: SELECT ITEM Command Qualifier: presentation type is not specified, no selection

135 Device Identity Source: Destination: preference, no help information available SIM ME Alpha Identifier: Rubriken Item Identifier of item: 01 Text String: News Item Identifier of item: 02 Text String: BörsenInfos Item Identifier of item: 03 Text String: Aktien D Item Identifier of item: 04 Text String: Aktien INT Item Identifier of item: 05 Text String: Sport Item Identifier of item: 06 Text String: 1.BLClubs Item Identifier of item: 07 Text String: Unterhaltung Item Identifier of item: 08 Text String: Horoskop Item Identifier of item: 09 Text String: Wetter D Item Identifier of item: 0A Text String: Wetter INT Item Identifier of item: 0B Text String: Wetter spez Item Identifier of item: 0D Text String: Mehr Infos Item Identifier of item: 0E Text String: Extras Item Identifier of item: 0F Text String: Hilfe Item Identifier of item: 10 Text String: Info TERMINAL RESPONSE (SELECT ITEM) s TERMINAL RESPONSE

136 GSM (7F20) GPRS location information (6F53) s Command Details Command Number: 1 Command Name: SELECT ITEM Command Qualifier: presentation type is not specified, no selection preference, no help information available Device Identity Source: ME Destination: SIM Result General Result: Backward move in the proactive SIM session requested by the user Item Identifier Identifier of item chosen: 00 SELECT (TELECOM) s SELECT response length 27 None s TELECOM SELECT (LND) s SELECT response length 15 Last number dialled (6F44) s Last number dialled UPDATE RECORD (PREV) s UPDATE RECORD Last number dialled (6F44) s Record No.: Previous record Command parameters/data: 20 bytes FF FF FF FF

137 UPDATE RECORD (PREV) s UPDATE RECORD Last number dialled (6F44) s Record No.: Previous record Command parameters/data: 20 bytes FF FF FF FF UPDATE RECORD (PREV) s UPDATE RECORD Last number dialled (6F44) s Record No.: Previous record Length of alpha identifier: 6 characters Alpha identifier: Weiß Length of BCD number: 7 TON and NPI Bit 8: 1 Type Of Number: International number Numbering Plan Identification: ISDN/telephony numbering plan Dialling number: Capability / Configuration Identifier: Not used Extension1 Record Identifier: Not used UPDATE RECORD (PREV) s UPDATE RECORD Last number dialled (6F44) s Record No.: Previous record Length of alpha identifier: 6 characters Alpha identifier: Length of BCD number: 7 TON and NPI

138 Bit 8: 1 Type Of Number: Unknown Numbering Plan Identification: ISDN/telephony numbering plan Dialling number: Capability / Configuration Identifier: Not used Extension1 Record Identifier: Not used UPDATE RECORD (PREV) s UPDATE RECORD Last number dialled (6F44) s Record No.: Previous record Length of alpha identifier: 6 characters Alpha identifier: Steink Length of BCD number: 7 TON and NPI Bit 8: 1 Type Of Number: International number Numbering Plan Identification: ISDN/telephony numbering plan Dialling number: Capability / Configuration Identifier: Not used Extension1 Record Identifier: Not used UPDATE RECORD (PREV) s UPDATE RECORD Last number dialled (6F44) s Record No.: Previous record Length of alpha identifier: 6 characters Alpha identifier: Length of BCD number: 7 TON and NPI Bit 8: 1 Type Of Number: Unknown Numbering Plan Identification: ISDN/telephony numbering plan Dialling number: Capability / Configuration Identifier: Not used Extension1 Record Identifier: Not used UPDATE RECORD (PREV) s UPDATE RECORD

139 Last number dialled (6F44) s Record No.: Previous record Length of alpha identifier: 6 characters Alpha identifier: Daksie Length of BCD number: 7 TON and NPI Bit 8: 1 Type Of Number: International number Numbering Plan Identification: ISDN/telephony numbering plan Dialling number: Capability / Configuration Identifier: Not used Extension1 Record Identifier: Not used UPDATE RECORD (PREV) s UPDATE RECORD Last number dialled (6F44) s Record No.: Previous record Length of alpha identifier: 6 characters Alpha identifier: Horak, Length of BCD number: 7 TON and NPI Bit 8: 1 Type Of Number: International number Numbering Plan Identification: ISDN/telephony numbering plan Dialling number: Capability / Configuration Identifier: Not used Extension1 Record Identifier: Not used UPDATE RECORD (PREV) s UPDATE RECORD Last number dialled (6F44) s Record No.: Previous record Length of alpha identifier: 6 characters

140 UPDATE BINARY Alpha identifier: Rankl, Length of BCD number: 7 TON and NPI Bit 8: 1 Type Of Number: International number Numbering Plan Identification: ISDN/telephony numbering plan Dialling number: Capability / Configuration Identifier: Not used Extension1 Record Identifier: Not used UPDATE RECORD (PREV) s UPDATE RECORD Last number dialled (6F44) s Record No.: Previous record Length of alpha identifier: 6 characters Alpha identifier: Dobo Length of BCD number: 7 TON and NPI Bit 8: 1 Type Of Number: International number Numbering Plan Identification: ISDN/telephony numbering plan Dialling number: Capability / Configuration Identifier: Not used Extension1 Record Identifier: Not used SELECT (GSM) s SELECT response length 27 GSM (7F20) None s GSM SELECT (LOCI) s SELECT response length 15 GSM (7F20) Location information (6F7E) s Location information UPDATE BINARY (Offset 0, Len 11) s

141 GSM (7F20) Location information (6F7E) s Offset: 0 Length: 11 TMSITemporary Mobile Subscriber BD A8 86 9B Identity: LAILocation Area Information: MCC 262, MNC 01, LAC 8707 TMSI TIME: Timer is not running Location update status: RFU bits 84: Location update status: Updated SELECT (BCCH) s SELECT response length 15 GSM (7F20) Broadcast control channels (6F74) s Broadcast control channels UPDATE BINARY (Offset 0, Len 16) s UPDATE BINARY GSM (7F20) Broadcast control channels (6F74) s Offset: 0 Length: 16 BCCH Format information: Bit map 0 EXTIND Extension indication: The complete BA BAIND Band indication: Is set to 0 Byte 317: A (Power Off) s Event: Power Off s

142 Layer 2 Cold reset ms ATR TS Value: 3B Meaning: Direct convention ICD (ETU): 4.45 T0 Value: 9A Meaning: Following interface chars: TA1, TD1 Number of historical chars: 10 ICD (ETU): TA1 Value: 94 Meaning: F = 512 D = 8 ICD (ETU): TD1 Value: 00 Meaning: Following interface chars: none Transfer protocol T=0 ICD (ETU): T1 Value: 91 Meaning: ICD (ETU): T2 Value: 01 Meaning: ICD (ETU): T3 Value: 00 Meaning: ICD (ETU): T4 Value: 17 Meaning: ICD (ETU): T5 Value: 00 Meaning: ICD (ETU): T6 Value: 01 Meaning:

143 ICD (ETU): T7 Value: 26 Meaning: & ICD (ETU): T8 Value: 05 Meaning: ICD (ETU): T9 Value: 00 Meaning: ICD (ETU): T10 Value: 96 Meaning: ICD (ETU): PPS request PPSS Value: FF Meaning: Initial character ICD (ETU): PPS0 Value: 00 Meaning: Following parameter chars: none Transfer protocol: T=0 ICD (ETU): PCK Value: FF Meaning: Check character ICD (ETU): PPS response PPSS Value: FF Meaning: Initial character ICD (ETU): PPS0 Value: 00 Meaning: Following parameter chars: none Transfer protocol: T=0 ICD (ETU): PCK Value: FF Meaning: Check character ICD (ETU): 14.38

144 APDU ms TPDU ms A0 A Outgoing data (2 bytes): 7F 20 9F 1B APDU ms TPDU ms A0 F B Incoming data (27 bytes): F FA FF AA FF 01 0E A A 83 8A APDU ms TPDU ms A0 A Outgoing data (2 bytes): 6F AE 9F 0F APDU ms TPDU ms A0 B

145 Incoming data (1 bytes): 03 APDU ms TPDU ms A0 A Outgoing data (2 bytes): 3F 00 9F 1B APDU ms TPDU ms A0 A Outgoing data (2 bytes): 2F APDU ms TPDU ms A0 A Outgoing data (2 bytes): 7F 20 9F 1B

146 APDU ms TPDU ms A0 A Outgoing data (2 bytes): 6F 05 9F 0F TPDU ms A0 C E Incoming data (14 bytes): F FF FF APDU ms TPDU ms A0 B Incoming data (4 bytes): APDU s TPDU s A Outgoing data (8 bytes): FF FF FF FF

147 APDU s TPDU s A0 F B Incoming data (27 bytes): F FA FF AA FF 01 0E A A 83 8A APDU s TPDU s A0 A Outgoing data (2 bytes): 6F AE 9F 0F APDU s TPDU s A0 B Incoming data (1 bytes): 03 APDU s

148 TPDU s A Outgoing data (17 bytes): 7F FF FF FF 7F 0F 00 DF 7F F F APDU s TPDU s A0 A Outgoing data (2 bytes): 6F 38 9F 0F TPDU s A0 C E Incoming data (14 bytes): A 6F FF FF APDU s TPDU s A0 B A Incoming data (10 bytes): FF 3F FF FF C 0F 0F 0C

149 91 3F APDU s TPDU s A0 A Outgoing data (2 bytes): 6F 2C 9F 0F TPDU s A0 C E Incoming data (14 bytes): F 2C FF FF F APDU s TPDU s A0 B Incoming data (16 bytes): 91 3F APDU s

150 TPDU s A0 A Outgoing data (2 bytes): 6F 32 9F 0F TPDU s A0 C E Incoming data (14 bytes): C 6F A FF FF F APDU s TPDU s A0 B C Incoming data (60 bytes): FF FF FF FF 91 3F APDU s TPDU s A0 A Outgoing data (2 bytes): 2F F2

151 94 04 APDU s TPDU s A0 A Outgoing data (2 bytes): 6F 3E 9F 0F TPDU s A0 C E Incoming data (14 bytes): F 3E A FF FF F APDU s TPDU s A0 B Incoming data (1 bytes): F

152 APDU s TPDU s A0 A Outgoing data (2 bytes): 6F 3F 9F 0F TPDU s A0 C E Incoming data (14 bytes): F 3F A FF FF F APDU s TPDU s A0 B Incoming data (1 bytes): FF 91 3F APDU s TPDU s A0 A Outgoing data (2 bytes): 3F 00

153 9F 1B APDU s TPDU s A0 A Outgoing data (2 bytes): 2F E APDU s TPDU s A0 A Outgoing data (2 bytes): 7F 20 9F 1B APDU s TPDU s A0 A Outgoing data (2 bytes): 6F 07

154 9F 0F TPDU s A0 C E Incoming data (14 bytes): F A FF F APDU s TPDU s A0 A Outgoing data (2 bytes): 6F 7E 9F 0F TPDU s A0 C E Incoming data (14 bytes): B 6F 7E FF F APDU s TPDU s A0 A Outgoing data (2 bytes): 7F 10 9F 1B APDU s

155 TPDU s A0 A Outgoing data (2 bytes): 6F 3A 9F 0F TPDU s A0 C F Incoming data (15 bytes): E A6 6F 3A FF E 91 3F APDU s TPDU s A0 A Outgoing data (2 bytes): 6F 3B 9F 0F TPDU s A0 C F Incoming data (15 bytes): C 6F 3B FF FF E 91 3F

156 APDU s TPDU s A0 A Outgoing data (2 bytes): 6F 4B 9F 0F TPDU s A0 C F Incoming data (15 bytes): D 6F 4B FF FF D 91 3F APDU s TPDU s A0 A Outgoing data (2 bytes): 7F 20 9F 1B APDU s TPDU s A0 A Outgoing data (2 bytes): 6F 78

157 9F 0F APDU s TPDU s A0 B Incoming data (2 bytes): F APDU s TPDU s A0 A Outgoing data (2 bytes): 6F APDU s TPDU s A0 A Outgoing data (2 bytes): 6F 14

158 94 04 APDU s TPDU s A0 A Outgoing data (2 bytes): 3F 00 9F 1B APDU s TPDU s A0 A Outgoing data (2 bytes): 2F E2 9F 0F TPDU s A0 C E Incoming data (14 bytes): A 2F E A FF FF F APDU s

159 TPDU s A0 B A Incoming data (10 bytes): F APDU s TPDU s A0 A Outgoing data (2 bytes): 7F 20 9F 1B APDU s TPDU s A0 A Outgoing data (2 bytes): 6F 07 9F 0F TPDU s A0 C E Incoming data (14 bytes): F A FF

160 91 3F APDU s TPDU s A0 B Incoming data (9 bytes): F APDU s TPDU s A0 A Outgoing data (2 bytes): 6F AD 9F 0F TPDU s A0 C E Incoming data (14 bytes): F AD FF FF F

161 APDU s TPDU s A0 B Incoming data (1 bytes): F APDU s TPDU s A0 A Outgoing data (2 bytes): 6F 7E 9F 0F APDU s TPDU s A0 B B Incoming data (11 bytes): BD A3 F0 DD 62 F FF F

162 APDU s TPDU s A0 A Outgoing data (2 bytes): 6F 20 9F 0F APDU s TPDU s A0 B Incoming data (9 bytes): 5C 65 AD 35 A F APDU s TPDU s A0 A Outgoing data (2 bytes): 6F 74 9F 0F APDU s TPDU s A0 B

163 Incoming data (16 bytes): A C F APDU s TPDU s A0 A Outgoing data (2 bytes): 6F 7B 9F 0F APDU s TPDU s A0 B C Incoming data (12 bytes): 22 F F F F F APDU s TPDU s A0 A Outgoing data (2 bytes): 6F 31

164 9F 0F APDU s TPDU s A0 B Incoming data (1 bytes): F APDU s TPDU s A0 A Outgoing data (2 bytes): 6F 39 9F 0F TPDU s A0 C E Incoming data (14 bytes): F F FF F

165 APDU s TPDU s A0 B Incoming data (3 bytes): F APDU s TPDU s A0 A Outgoing data (2 bytes): 6F 37 9F 0F TPDU s A0 C E Incoming data (14 bytes): F FF FF F APDU s TPDU s A0 A Outgoing data (2 bytes): 6F 37

166 9F 0F TPDU s A0 C E Incoming data (14 bytes): F FF FF F APDU s TPDU s A0 B Incoming data (3 bytes): F APDU s TPDU s A0 A Outgoing data (2 bytes): 6F 41 9F 0F TPDU s A0 C E

167 Incoming data (14 bytes): F FF FF F APDU s TPDU s A0 B Incoming data (5 bytes): D F APDU s TPDU s A0 A Outgoing data (2 bytes): 6F 45 9F 0F TPDU s A0 C E Incoming data (14 bytes): F FF FF F

168 APDU s TPDU s A0 B Incoming data (20 bytes): FF FF FF FF 91 3F APDU s TPDU s A0 A Outgoing data (2 bytes): 7F 10 9F 1B APDU s TPDU s A0 A Outgoing data (2 bytes): 6F 44 9F 0F TPDU s A0 C F Incoming data (15 bytes): C8 6F FF FF F

169 APDU s TPDU s A0 A Outgoing data (2 bytes): 6F 43 9F 0F TPDU s A0 C E Incoming data (14 bytes): F FF FF F APDU s TPDU s A0 B Incoming data (2 bytes): 68 FF 91 3F APDU s TPDU s A0 A Outgoing data (2 bytes): 6F 4A

170 9F 0F TPDU s A0 C F Incoming data (15 bytes): F 4A FF FF D 91 3F APDU s TPDU s A0 A Outgoing data (2 bytes): 6F 3D 9F 0F TPDU s A0 C F Incoming data (15 bytes): C 6F 3D FF FF E 91 3F APDU s TPDU s A0 A Outgoing data (2 bytes): 6F 42 9F 0F TPDU s

171 A0 C F Incoming data (15 bytes): F FF FF F APDU s TPDU s A0 A Outgoing data (2 bytes): 7F 20 9F 1B APDU s TPDU s A0 A Outgoing data (2 bytes): 6F 46 9F 0F TPDU s A0 C E Incoming data (14 bytes): F FF FF F

172 APDU s TPDU s A0 B Incoming data (17 bytes): 01 FF FF FF FF FF FF FF FF 91 3F APDU s TPDU s A0 A Outgoing data (2 bytes): 6F 50 9F 0F TPDU s A0 C E Incoming data (14 bytes): F FF FF F APDU s TPDU s A0 B Incoming data (16 bytes):

173 91 3F APDU s TPDU s A0 A Outgoing data (2 bytes): 6F 52 9F 0F TPDU s A0 C E Incoming data (14 bytes): F FF FF F APDU s TPDU s A0 B Incoming data (9 bytes): 4D FB E F APDU s TPDU s

174 A0 A Outgoing data (2 bytes): 6F 53 9F 0F TPDU s A0 C E Incoming data (14 bytes): E 6F FF FF F APDU s TPDU s A0 B E Incoming data (14 bytes): C E FF FF FF 62 F F APDU s TPDU s A0 A Outgoing data (2 bytes): 6F

175 APDU s TPDU s A0 A Outgoing data (2 bytes): 6F APDU s TPDU s A0 A Outgoing data (2 bytes): EA APDU s TPDU s A0 A Outgoing data (2 bytes): EA

176 APDU s TPDU s A0 A Outgoing data (2 bytes): 7F APDU s TPDU s A0 A Outgoing data (2 bytes): 7F 10 9F 1B APDU s TPDU s A0 A Outgoing data (2 bytes): 2F F APDU s TPDU s A0 A Outgoing data (2 bytes):

177 7F 20 9F 1B APDU s TPDU s A0 A Outgoing data (2 bytes): 6F 30 9F 0F TPDU s A0 C E Incoming data (14 bytes): A 6F FF FF F APDU s TPDU s A0 B A Incoming data (90 bytes): 32 F F F F F F F F F F F F F F F F F F F F F F F F F F F F F

178 APDU s TPDU s A0 A Outgoing data (2 bytes): 7F 10 9F 1B APDU s TPDU s A0 A Outgoing data (2 bytes): 6F 3C 9F 0F TPDU s A0 C F Incoming data (15 bytes): A 50 6F 3C FF FF B0 91 3F APDU s TPDU s A0 A Outgoing data (2 bytes): 6F 40

179 9F 0F TPDU s A0 C F Incoming data (15 bytes): A 6F FF FF E 91 3F APDU s TPDU s A0 B E E E 75 6D 6D FF FF FF FF FF FF 91 3F APDU s TPDU s A0 B E FF FF FF FF FF FF 91 3F APDU s

180 TPDU s A0 A Outgoing data (2 bytes): 6F 3C 9F 0F APDU s TPDU s A0 B B0 Incoming data (176 bytes): F B 49 B4 BC 0C 9A 36 A7 20 FB BB 0D 92 D1 5C 30 9A 0B D5 DB A0 98 4D 17 A3 E D8 0D 82 D B EC 16 8B DD C 68 FD 76 BB E B 3D 46 D3 41 FA FA B9 3C A7 97 D9 6C 3A E8 5E CB 6E E 83 B4 E9 32 5B 5E 37 BB EB ED E BA 87 E A 8C A6 83 CA D 46 8B C FF FF FF 91 3F APDU s TPDU s A0 A Outgoing data (2 bytes): 6F 44 9F 0F

181 APDU s TPDU s A0 B Incoming data (20 bytes): 44 6F 62 6F FF FF FF FF FF FF FF FF 91 3F APDU s TPDU s A F Incoming data (63 bytes): D0 3D C 8F D E F 0B 02 4D C F D 79 4D 6F 6E F APDU s TPDU s A0 A Outgoing data (2 bytes): 6F 3C 9F 0F

182 APDU s TPDU s A0 B B0 Incoming data (176 bytes): D BE F1 2C 90 BB 5C D A0 A0 5B 5E 37 A3 CA C 64 0C E3 41 B1 DB 0B 36 7B C1 66 A0 18 4E 07 CB B B1 59 1E 3E ED 34 1D 24 9A CD B D4 4E D3 41 A2 15 2D 17 BB C D9 6C 16 8B E F B3 C3 6E 32 FF FF APDU s TPDU s A0 A Outgoing data (2 bytes): 6F 44 9F 0F APDU s TPDU s A0 B Incoming data (20 bytes): E 6B 6C 2C FF FF

183 FF FF FF FF APDU s TPDU s A0 A Outgoing data (2 bytes): 6F 3C 9F 0F APDU s TPDU s A0 B B0 Incoming data (176 bytes): D7 37 DB 7C 0E BB CF 2E 69 D8 BD C8 65 D7 39 DD D E3 77 1B 44 2D CF E9 A0 DE 2F 39 7D B6 70 B8 5A AE 15 FB 45 7F E6 9E F 5C DF 6C F3 39 EC 3E 47 9C F2 9E AC FD 7A FF

184 APDU s TPDU s A0 B B0 Incoming data (176 bytes): D E 8B CB 6E D 2F BB 41 CD 70 9A 0D 0A 8E C7 EF BA 9B 0E 9A 97 D C E7 82 C5 5C B0 19 C8 9D 1E A3 E9 A0 73 D9 5D A7 EB E9 2E D0 B4 EC DD A0 69 BA 0C 12 A7 E9 F C 2E CF CB A0 37 B9 2C D3 EE EC E5 65 D0 B DD BA 0C C2 C A8 DE 06 A5 D1 6E D0 BD 9C A6 97 E D AE 2F BB 41 FA 3A 68 CD 77 BB CB 6E 17 APDU s TPDU s A0 B B0 Incoming data (176 bytes): C C 20 E F BB C9 20 7A BA 5D D6 81 8C F AC A6 93 DD 74 B C C 06 FF FF FF FF FF APDU s

185 TPDU s A0 A Outgoing data (2 bytes): 6F 44 9F 0F APDU s TPDU s A0 B Incoming data (20 bytes): 48 6F B 2C FF FF FF FF FF FF APDU s TPDU s A C Outgoing data (12 bytes): B APDU s

186 TPDU s A0 A Outgoing data (2 bytes): 6F 3C 9F 0F APDU s TPDU s A0 B B0 Incoming data (176 bytes): C 0B F FF FF FF FF FF FF 91 0B APDU s TPDU s A0 A Outgoing data (2 bytes): 6F 44 9F 0F APDU s TPDU s A0 B

187 Incoming data (20 bytes): B FF FF FF FF FF FF 91 0B APDU s TPDU s A B Incoming data (11 bytes): D APDU s TPDU s A0 A Outgoing data (2 bytes): 6F 3C 9F 0F APDU s TPDU s A0 B B0

188 Incoming data (176 bytes): C 0C FF FF FF FF FF FF APDU s TPDU s A0 A Outgoing data (2 bytes): 6F 44 9F 0F APDU s TPDU s A0 B Incoming data (20 bytes): FF FF FF FF FF FF F4 FF FF FF FF FF FF

189 APDU s TPDU s A Outgoing data (22 bytes): A APDU s TPDU s A0 A Outgoing data (2 bytes): 6F 3C 9F 0F APDU s TPDU s A0 B B0 Incoming data (176 bytes): C C8 30 9B FD 06 A5 D B0 9C DD 21 D0 74 8C E6 BB 41 F6 B7 1B 54 AC 8F D1 20 7D 1D 84 E6 CB CB EE 10 E8 1A 76 BB F 83 D6 61 B7 1B D4 0E BB 41 C5 FA 18 0D 6A 87 D9 A0 70 1B 24 2E CF E EC 96 D7 CD 65 F7 0F 64 4D 97 D9 65 D0 51 EE F F7 7B 8C 4E 81 C2 F5 39 A D7 E5 F4 10 C8 F9 96 B7 C3 6E A D C8 E5 FA B9 5C FF FF FF FF FF FF

190 APDU s TPDU s A0 A Outgoing data (2 bytes): 6F 44 9F 0F APDU s TPDU s A0 B Incoming data (20 bytes): E 6B FF FF FF FF FF FF APDU s TPDU s A0 A Outgoing data (2 bytes): 7F 20 9F 1B

191 APDU s TPDU s A Outgoing data (16 bytes): 2E C9 10 E2 2F 4D C 33 D0 98 7A 64 CC 9F 0C TPDU s A0 C C Incoming data (12 bytes): E8 7F B D 34 CC 00 APDU s TPDU s A0 A Outgoing data (2 bytes): 7F 10 9F 1B APDU s TPDU s A0 A Outgoing data (2 bytes): 6F 3C

192 9F 0F APDU s TPDU s A0 B B0 Incoming data (176 bytes): CD 70 9A 0D D9 69 7B 59 9E 07 4D EB E2 79 7E 4E 2F B7 41 BC C9 2C 4A 5B C4 60 B1 F E8 E8 B7 DC 95 1E CF E6 2E 72 D E9 75 B9 BB 4C 06 B5 C3 69 B6 0E 34 2F D8 3D 1F CB D3 70 3A C8 FC C8 65 7A 38 CD 9E 83 A8 E8 F4 1C 94 9E 83 C2 A0 66 B2 59 6C 95 DD E3 30 7C 5E E A8 5D 9E CF C3 E7 32 FF FF FF FF FF FF APDU s TPDU s A0 A Outgoing data (2 bytes): 6F 44 9F 0F APDU s

193 TPDU s A0 B Incoming data (20 bytes): FF FF FF FF FF FF F0 FF FF FF FF FF FF APDU s TPDU s A0 A Outgoing data (2 bytes): 7F 20 9F 1B APDU s TPDU s A0 A Outgoing data (2 bytes): 6F 20 9F 0F APDU s TPDU s A0 D Outgoing data (9 bytes): 00 B D 34 CC 00 02

194 APDU s TPDU s A0 A Outgoing data (2 bytes): 7F 10 9F 1B APDU s TPDU s A0 A Outgoing data (2 bytes): 6F 3C 9F 0F APDU s TPDU s A0 B2 0A 04 B0 Incoming data (176 bytes):

195 F7 D9 CF A6 A7 CF ED 3E 87 C5 65 1D 68 5A A6 EB CB 6E D0 34 5D 06 3D A B E A C8 4C 06 A7 2C 10 B1 C8 0C C1 29 0B 04 BD B2 40 C A A6 D4 20 B5 3A 05 BD C A8 9C C C 66 B E 2F 83 C2 6E 10 B9 EC DD E6 B0 FB 0C 4A A2 E C8 19 1E A3 E5 E9 31 9A EE 02 FF FF FF APDU s TPDU s A0 A Outgoing data (2 bytes): 6F 44 9F 0F APDU s TPDU s A0 B Incoming data (20 bytes): E FF FF FF FF FF FF FF FF

196 APDU s TPDU s A0 A Outgoing data (2 bytes): 6F 3C 9F 0F APDU s TPDU s A0 B2 0B 04 B0 Incoming data (176 bytes): CD 70 9A 0D D9 69 7B 59 9E 07 4D EB E2 79 7E 4E 2F B7 41 BC C9 2C 4A 5B C4 60 B1 F E8 E8 B7 DC 95 1E CF E6 2E 72 D E9 75 B9 BB 4C 06 B5 C3 69 B6 0E 34 2F D8 3D 1F CB D3 70 3A C8 FC C8 65 7A 38 CD 9E 83 A8 E8 F4 1C 94 9E 83 C2 A0 66 B2 59 6C 95 DD E3 30 7C 5E E A8 5D 9E CF C3 E7 32 FF FF FF FF FF FF APDU s TPDU s A0 A Outgoing data (2 bytes): 6F 44 9F 0F APDU s

197 TPDU s A0 B Incoming data (20 bytes): FF FF FF FF APDU s TPDU s A0 A Outgoing data (2 bytes): 7F 20 9F 1B APDU s TPDU s A0 A Outgoing data (2 bytes): 6F 74 9F 0F APDU s

198 TPDU s A0 D Outgoing data (16 bytes): A C APDU s TPDU s A0 A Outgoing data (2 bytes): 6F 7E 9F 0F APDU s TPDU s A0 D B Outgoing data (11 bytes): BD A8 75 3E 62 F FF 00 APDU s TPDU s A0 A Outgoing data (2 bytes):

199 7F 10 9F 1B APDU s TPDU s A0 A Outgoing data (2 bytes): 6F 3C 9F 0F APDU s TPDU s A0 B2 0C 04 B0 Incoming data (176 bytes): C FF FF FF FF FF FF

200 APDU s TPDU s A0 A Outgoing data (2 bytes): 6F 44 9F 0F APDU s TPDU s A0 B2 0A Incoming data (20 bytes): FF FF FF FF APDU s TPDU s A0 A Outgoing data (2 bytes): 6F 3C 9F 0F APDU s TPDU s

201 A0 B2 0D 04 B0 Incoming data (176 bytes): C FF FF FF FF FF FF APDU s TPDU s A0 A Outgoing data (2 bytes): 6F 3A 9F 0F APDU s TPDU s A0 B2 7D 04 1E FF FF FF FF FF FF

202 APDU s TPDU s A0 A Outgoing data (2 bytes): 6F 42 9F 0F APDU s TPDU s A0 B Incoming data (40 bytes): 54 2D D E 74 EC 0C FF FF FF FF D 00 FF FF FF APDU s TPDU s A0 A Outgoing data (2 bytes): 6F 3C 9F 0F

203 APDU s TPDU s A0 B2 0E 04 B0 Incoming data (176 bytes): C FF FF FF FF FF FF APDU s TPDU s A0 B2 0F 04 B0 Incoming data (176 bytes): C FF FF FF FF FF FF APDU s

204 TPDU s A0 A Outgoing data (2 bytes): 6F 40 9F 0F APDU s TPDU s A0 B E E E 75 6D 6D FF FF FF FF FF FF APDU s TPDU s A0 A Outgoing data (2 bytes): 6F 42 9F 0F APDU s

205 TPDU s A0 DC Outgoing data (40 bytes): 54 2D D E 74 EC 0C FF FF FF FF D 00 FF FF FF APDU s TPDU s A0 DC Outgoing data (40 bytes): 54 2D D E 74 EC 0C FF FF FF FF D 00 FF FF FF APDU s TPDU s A0 DC Outgoing data (40 bytes): 54 2D D E 74 EC 0C FF FF FF FF D 00 FF FF FF APDU s

206 TPDU s A0 A Outgoing data (2 bytes): 6F 40 9F 0F APDU s TPDU s A0 B E FF FF FF FF FF FF APDU s TPDU s A0 B E FF FF FF FF FF FF

207 APDU s TPDU s A0 A Outgoing data (2 bytes): 6F 3A 9F 0F APDU s TPDU s A0 B E FF FF FF FF FF FF APDU s TPDU s A0 B E B 75 6E FF FF

208 APDU s TPDU s A0 B E C 61 6E B 75 6E F4 FF APDU s TPDU s A0 B E FF FF FF FF FF FF APDU s TPDU s A0 B E E E 6E FF FF FF FF FF FF

209 APDU s TPDU s A0 B E FF FF FF FF FF FF APDU s TPDU s A0 B E E 6E FF FF FF FF FF FF FF APDU s TPDU s A0 B E E FF FF FF FF FF FF FF FF FF FF FF APDU s

210 TPDU s A0 B E FF FF FF FF FF FF APDU s TPDU s A0 B2 0A 04 1E FF FF FF FF FF FF APDU s TPDU s A0 B2 0B 04 1E 4B 6F 6C 7A 65 6E FF FF FF FF FF FF FF FF FF FF FF FF

211 APDU s TPDU s A0 B2 0C 04 1E 41 6C B 66 6C E 72 6F 21 FF FF FF FF FF FF FF APDU s TPDU s A0 B2 0D 04 1E 41 6C B 66 6C D 29 FF FF FF FF FF FF FF FF FF APDU s TPDU s A0 B2 0E 04 1E E D FF FF FF FF FF FF FF FF FF FF FF APDU s TPDU s

212 A0 B2 0F 04 1E 4A 6F FF FF FF FF FF FF FF FF FF APDU s TPDU s A0 B E E D 29 FF FF FF FF FF FF FF APDU s TPDU s A0 B E 44 6F 62 6F FF FF FF FF FF FF FF FF FF FF APDU s

213 TPDU s A0 B E B A FF FF FF FF FF FF FF FF FF FF FF FF APDU s TPDU s A0 B E 48 6F B D 29 FF FF FF FF FF FF FF FF FF FF FF FF FF APDU s TPDU s A0 B E 4A 6F D 29 FF FF FF FF FF FF FF FF FF FF FF FF FF

214 APDU s TPDU s A0 B E FF FF FF FF FF FF APDU s TPDU s A0 B E 4D F 6E 61 6C D 29 FF FF FF FF FF FF FF FF FF APDU s TPDU s A0 B E 4D D 29 FF FF FF FF FF FF FF FF FF FF FF FF FF

215 APDU s TPDU s A0 B E 4D 6F E D 29 FF FF FF FF F8 FF FF FF FF FF APDU s TPDU s A0 B E FF FF FF FF FF FF APDU s TPDU s A0 B2 1A 04 1E FF FF FF FF FF FF APDU s

216 TPDU s A0 B2 1B 04 1E FF FF FF FF FF FF APDU s TPDU s A0 B2 1C 04 1E D 29 FF FF FF FF FF FF FF FF FF FF FF APDU s TPDU s A0 B2 1D 04 1E 4D 6F C 62 6F 78 2D FF FF

217 APDU s TPDU s A0 B2 1E 04 1E 4D 6F C 62 6F 78 2D C 61 6E FF FF FF FF FF FF APDU s TPDU s A0 B2 1F 04 1E 4E 6F FF FF F2 FF FF APDU s TPDU s A0 B E D 29 FF FF FF FF FF FF FF FF FF FF FF FF

218 APDU s TPDU s A0 B E B 6D 61 6E 6E D 29 FF FF FF FF FF FF FF FF FF FF APDU s TPDU s A0 B E FF FF FF FF FF FF APDU s TPDU s A0 B E 48 6F 6C 7A E D FF FF FF FF FF FF APDU s TPDU s

219 A0 B E 48 6F 6C 7A E D FF FF FF FF FF FF APDU s TPDU s A0 B E FF FF FF FF FF FF APDU s TPDU s A0 B E D 61 6E 6E D 29 FF FF FF FF FF FF FF FF FF FF APDU s TPDU s

220 A0 B E 4D 6F E D 29 FF FF FF FF FF FF FF FF FF FF APDU s TPDU s A0 B E B A D 29 FF FF FF FF FF FF FF APDU s TPDU s A0 B E FF FF FF FF FF FF APDU s

221 TPDU s A0 B2 2A 04 1E FF FF FF FF FF FF APDU s TPDU s A0 B2 2B 04 1E E 6B 6C FF FF FF FF FF FF FF FF FF FF FF FF FF APDU s TPDU s A0 B2 2C 04 1E 48 6F B FF FF FF FF FF FF FF FF FF

222 APDU s TPDU s A0 B2 2D 04 1E E 6B 6C E FF FF FF FF FF FF APDU s TPDU s A0 B2 2E 04 1E E 6B 6C E 2C E 72 6F FF FF FF FF FF FF FF FF APDU s TPDU s A0 B2 2F 04 1E D 61 6E 6E E FF FF FF FF F2 FF FF FF FF FF FF APDU s

223 TPDU s A0 B E F E FF FF FF FF FF FF FF FF FF FF FF FF FF APDU s TPDU s A0 B E E 6B 65 FF FF FF FF FF FF FF APDU s TPDU s A0 B E 53 7E 1E 6D FF FF FF FF FF FF FF

224 APDU s TPDU s A0 B E E 6E FF FF FF FF FF FF FF APDU s TPDU s A0 B E E FF FF FF FF FF FF FF FF FF FF APDU s TPDU s A0 B E E 2C D FF FF FF FF FF FF FF FF FF FF FF APDU s TPDU s

225 A0 B E FF FF FF FF FF FF APDU s TPDU s A0 B E FF FF FF FF FF FF APDU s TPDU s A0 B E FF FF FF FF FF FF APDU s TPDU s

226 TPDU s A0 B E FF FF FF FF FF FF APDU s TPDU s A0 B2 3A 04 1E FF FF FF FF FF FF APDU s TPDU s A0 B2 3B 04 1E FF FF FF FF FF FF APDU s

227 A0 B2 3C 04 1E FF FF FF FF FF FF APDU s TPDU s A0 B2 3D 04 1E FF FF FF FF FF FF APDU s TPDU s A0 B2 3E 04 1E FF FF FF FF FF FF APDU s

228 TPDU s A0 B2 3F 04 1E FF FF FF FF FF FF APDU s TPDU s A0 B E FF FF FF FF FF FF APDU s TPDU s A0 B E FF FF FF FF FF FF APDU s TPDU s

229 A0 B E FF FF FF FF FF FF APDU s TPDU s A0 B E FF FF FF FF FF FF APDU s TPDU s A0 B E FF FF FF FF FF FF APDU s

230 TPDU s A0 B E FF FF FF FF FF FF APDU s TPDU s A0 B E FF FF FF FF FF FF APDU s TPDU s A0 B E FF FF FF FF FF FF APDU s TPDU s A0 B E

231 FF FF FF FF FF FF APDU s TPDU s A0 B E FF FF FF FF FF FF APDU s TPDU s A0 B2 4A 04 1E FF FF FF FF FF FF APDU s TPDU s

232 A0 B2 4B 04 1E FF FF FF FF FF FF APDU s TPDU s A0 B2 4C 04 1E FF FF FF FF FF FF APDU s TPDU s A0 B2 4D 04 1E FF FF FF FF FF FF APDU s TPDU s

233 A0 B2 4E 04 1E FF FF FF FF FF FF APDU s TPDU s A0 B2 4F 04 1E FF FF FF FF FF FF APDU s TPDU s A0 B E FF FF FF FF FF FF APDU s

234 TPDU s A0 B E FF FF FF FF FF FF APDU s TPDU s A0 B E FF FF FF FF FF FF APDU s TPDU s A0 B E FF FF FF FF FF FF APDU s TPDU s

235 A0 B E FF FF FF FF FF FF APDU s TPDU s A0 B E FF FF FF FF FF FF APDU s TPDU s A0 B E FF FF FF FF FF FF APDU s

236 TPDU s A0 B E FF FF FF FF FF FF APDU s TPDU s A0 B E FF FF FF FF FF FF APDU s TPDU s A0 B E FF FF FF FF FF FF

237 APDU s TPDU s A0 B2 5A 04 1E FF FF FF FF FF FF APDU s TPDU s A0 B2 5B 04 1E FF FF FF FF FF FF APDU s TPDU s A0 B2 5C 04 1E FF FF FF FF FF FF APDU s TPDU s

238 A0 B2 5D 04 1E FF FF FF FF FF FF APDU s TPDU s A0 B2 5E 04 1E FF FF FF FF FF FF APDU s TPDU s A0 B2 5F 04 1E FF FF FF FF FF FF APDU s TPDU s

239 A0 B E FF FF FF FF FF FF APDU s TPDU s A0 B E FF FF FF FF FF FF APDU s TPDU s A0 B E FF FF FF FF FF FF APDU s

240 TPDU s A0 B E FF FF FF FF FF FF APDU s TPDU s A0 B E FF FF FF FF FF FF APDU s TPDU s A0 B E FF FF FF FF FF FF

241 APDU s TPDU s A0 B E FF FF FF FF FF FF APDU s TPDU s A0 B E FF FF FF FF FF FF APDU s TPDU s A0 B E FF FF FF FF FF FF APDU s

242 TPDU s A0 B E FF FF FF FF FF FF APDU s TPDU s A0 B2 6A 04 1E FF FF FF FF FF FF APDU s TPDU s A0 B2 6B 04 1E FF FF FF FF FF FF

243 APDU s TPDU s A0 B2 6C 04 1E FF FF FF FF FF FF APDU s TPDU s A0 B2 6D 04 1E FF FF FF FF FF FF APDU s TPDU s A0 B2 6E 04 1E FF FF FF FF FF FF APDU s TPDU s

244 A0 B2 6F 04 1E FF FF FF FF FF FF APDU s TPDU s A0 B E FF FF FF FF FF FF APDU s TPDU s A0 B E FF FF FF FF FF FF APDU s TPDU s

245 TPDU s A0 B E FF FF FF FF FF FF APDU s TPDU s A0 B E FF FF FF FF FF FF APDU s TPDU s A0 B E FF FF FF FF FF FF APDU s

246 A0 B E FF FF FF FF FF FF APDU s TPDU s A0 B E FF FF FF FF FF FF APDU s TPDU s A0 B E FF FF FF FF FF FF APDU s

247 TPDU s A0 B E FF FF FF FF FF FF APDU s TPDU s A0 B E FF FF FF FF FF FF APDU s TPDU s A0 B2 7A 04 1E FF FF FF FF FF FF APDU s TPDU s

248 A0 B2 7B 04 1E FF FF FF FF FF FF APDU s TPDU s A0 B2 7C 04 1E FF FF FF FF FF FF APDU s TPDU s A0 B2 7D 04 1E FF FF FF FF FF FF APDU s

249 TPDU s A0 A Outgoing data (2 bytes): 6F 3B 9F 0F APDU s TPDU s A0 B E FF FF FF FF FF FF APDU s TPDU s A0 B E FF FF FF FF FF FF APDU s TPDU s A0 B E

250 FF FF FF FF FF FF APDU s TPDU s A0 B E FF FF FF FF FF FF APDU s TPDU s A0 B E FF FF FF FF FF FF APDU s TPDU s

251 A0 B E FF FF FF FF FF FF APDU s TPDU s A0 B E FF FF FF FF FF FF APDU s TPDU s A0 B E FF FF FF FF FF FF APDU s TPDU s

252 A0 B E FF FF FF FF FF FF APDU s TPDU s A0 B2 0A 04 1E FF FF FF FF FF FF APDU s TPDU s A0 F B Incoming data (27 bytes): F FA FF AA FF 01 0E C A 83 8A APDU s

253 TPDU s A0 F B Incoming data (27 bytes): F FA FF AA FF 01 0E C A 83 8A APDU s TPDU s A0 A Outgoing data (2 bytes): 6F 43 9F 0F APDU s TPDU s A0 D Outgoing data (2 bytes): 69 FF APDU s TPDU s A0 A Outgoing data (2 bytes):

254 7F 20 9F 1B APDU s TPDU s A Outgoing data (16 bytes): 2B A 9C 95 6F 2E EC CD EC 4E 73 9F 0C TPDU s A0 C C Incoming data (12 bytes): C B3 34 3B 7D E0 A9 6E C4 00 APDU s TPDU s A0 A Outgoing data (2 bytes): 6F 20 9F 0F

255 APDU s TPDU s A0 D Outgoing data (9 bytes): 34 3B 7D E0 A9 6E C APDU s TPDU s A0 A Outgoing data (2 bytes): 6F 7E 9F 0F APDU s TPDU s A0 D B Outgoing data (11 bytes): BD A8 86 9B 62 F FF 00

256 APDU s TPDU s A0 F B Incoming data (27 bytes): F FA FF AA FF 01 0E A A 83 8A APDU s TPDU s A Outgoing data (16 bytes): 05 E4 5E B D AF DA 6A CC 5D E1 9A EA 9F 0C TPDU s A0 C C Incoming data (12 bytes): 54 B5 AC DD D4 F1 98 ED 83 9E APDU s TPDU s A0 A Outgoing data (2 bytes): 6F 52

257 9F 0F APDU s TPDU s A0 D Outgoing data (9 bytes): D4 F1 98 ED 83 9E APDU s TPDU s A0 A Outgoing data (2 bytes): 6F 53 9F 0F APDU s TPDU s A0 D E Outgoing data (14 bytes): C0 00 0E 2A FF FF FF 62 F

258 APDU s TPDU s A0 F B Incoming data (27 bytes): F FA FF AA FF 01 0E A A 83 8A APDU s TPDU s A0 F B Incoming data (27 bytes): F FA FF AA FF 01 0E A A 83 8A APDU s TPDU s A0 F B Incoming data (27 bytes): F FA FF AA FF 01 0E A A 83 8A

259 APDU s TPDU s A0 F B Incoming data (27 bytes): F FA FF AA FF 01 0E A A 83 8A APDU s TPDU s A0 F B Incoming data (27 bytes): F FA FF AA FF 01 0E A A 83 8A APDU s TPDU s A0 F B Incoming data (27 bytes): F FA FF AA FF 01 0E A A 83 8A APDU s TPDU s

260 A0 F B Incoming data (27 bytes): F FA FF AA FF 01 0E A A 83 8A APDU s TPDU s A0 F B Incoming data (27 bytes): F FA FF AA FF 01 0E A A 83 8A APDU s TPDU s A0 F B Incoming data (27 bytes): F FA FF AA FF 01 0E A A 83 8A APDU s TPDU s

261 A0 C Outgoing data (9 bytes): D BD APDU s TPDU s A BD Incoming data (189 bytes): D0 81 BA B 65 6E 8F E F 0C C E 49 6E 66 6F 73 8F B E F 0B B E E 54 8F F F 0B E 42 4C 2D 43 6C F 0D E C E 67 8F F 72 6F 73 6B 6F 70 8F F 0B 0A E 54 8F 0C 0B A 8F 0B 0D 4D E 66 6F 73 8F 07 0E F 06 0F C F E 66 6F APDU s TPDU s A F Outgoing data (15 bytes):

262 APDU s TPDU s A Incoming data (89 bytes): D B E F F F D F D F D F E 4D B F E 4D B F E 4D B APDU s TPDU s A F Outgoing data (15 bytes): BD APDU s TPDU s A BD Incoming data (189 bytes): D0 81 BA B 65 6E 8F E F 0C C E 49 6E 66 6F 73 8F B E F 0B B E E 54 8F F F 0B E 42 4C 2D 43 6C F 0D E C E 67 8F F 72 6F 73 6B 6F 70 8F F 0B 0A E 54 8F 0C 0B A 8F 0B 0D 4D E 66 6F 73 8F 07 0E F 06 0F C F E 66 6F

263 APDU s TPDU s A F Outgoing data (15 bytes): APDU s TPDU s A0 A Outgoing data (2 bytes): 7F 10 9F 1B APDU s TPDU s A0 A Outgoing data (2 bytes): 6F 44 9F 0F

264 APDU s TPDU s A0 DC Outgoing data (20 bytes): FF FF FF FF APDU s TPDU s A0 DC Outgoing data (20 bytes): FF FF FF FF APDU s TPDU s A0 DC Outgoing data (20 bytes): E FF FF FF FF FF FF FF FF

265 APDU s TPDU s A0 DC Outgoing data (20 bytes): FF FF FF FF FF FF F0 FF FF FF FF FF FF APDU s TPDU s A0 DC Outgoing data (20 bytes): E 6B FF FF FF FF FF FF APDU s TPDU s A0 DC Outgoing data (20 bytes): FF FF FF FF FF FF F4 FF FF FF FF FF FF

266 APDU s TPDU s A0 DC Outgoing data (20 bytes): B FF FF FF FF FF FF APDU s TPDU s A0 DC Outgoing data (20 bytes): 48 6F B 2C FF FF FF FF FF FF APDU s TPDU s A0 DC Outgoing data (20 bytes): E 6B 6C 2C FF FF FF FF FF FF APDU s

267 TPDU s A0 DC Outgoing data (20 bytes): 44 6F 62 6F FF FF FF FF FF FF FF FF APDU s TPDU s A0 A Outgoing data (2 bytes): 7F 20 9F 1B APDU s TPDU s A0 A Outgoing data (2 bytes): 6F 7E 9F 0F APDU s

268 TPDU s A0 D B Outgoing data (11 bytes): BD A8 86 9B 62 F FF 00 APDU s TPDU s A0 A Outgoing data (2 bytes): 6F 74 9F 0F APDU s TPDU s A0 D Outgoing data (16 bytes): A Power off s