Samsung u740 (Dual Flip) Hacking/Applications

Test Mode Commands (Hidden Stuff!)

Disclaimer: Any of the hacks on this site could damage your phone and possibly void your warranty, not to mention is possibly a terms of service dealbreaker for your mobile carrier

<< Back to main index

To view simple phone info, or clear your phone memory, (RTN Menu) from the main screen, enter the following:

##786#

To get into "Test Mode", from the main screen, enter the following:

47*68#13580

You'll see TestMode <M>
The service also goes off, you wont get any calls/texts/etc when in this mode.
Commands are entered as three digit numerical commands, press # to exit a command (you'll see a ".") then its ready for the next command. If you want to cancel a partial command input, press # and you'll get the "." again.

The full list is below, but here's a few of the most useful ones i could find, for you, other commands might be more useful, you decide: Any missing numbers, or blank numbers are "No find Cmd", aka no such command. All your cmd are belong to us.
002 - Restarts teh phone (to exist Test Mode)
031 - Phone version
032 - Phone NAM
033 - Software version
034 - Phone ESN
037 - Rebuild your EFS, incase you've screwed it somehow
039 - NV Backup
040 - NV Restore
041 - Backlight
043 - Vibrator
047 - Front LCD Contrast
048 - Camera light (incase you want to turn your phone into a flashlight)
049 - Main LCD Brightness
129 - Whipes your whole god damn phone clean
159 - Phone MIN
210 - Phone MEID
252 - Quick Boot (gets rid of the annoying Bell animation/sounds on startup)

So here's what I figured out, in most cases its just what was displayed on the phone, i have no clue what most of it does.
FULL LIST

001 Suspend
002 Restarts Phone
003 No find cmd
004 No find cmd
005 No find cmd
006 No find cmd
007 "Get RF mode"
	PCS MODE 0-5
008 "Set RF mode"
	PCS MODE
		0 AMPS MODE
		1 CDMA MODE
		2 PCS MODE
		3 900MH MODE
		4 HDR MODE
009 Setup defal 0-4
010 PA____RA__	0-1
011 Carrier[P]On
012 Carrier[P]Off
013 Chan[P]: 	0-1200	(350)
014 CDATA
015 TrkLo[P]:	0-511	(235)
016 PCS DVGA (numbers change - reading for something, perhaps to do with camera?)
017 P:-77.0dBm
	LNAoff0:0255 / -77.0dBm
	LNAoff1:0326 / -42.0dBm
	LNAoff2:0326 / -33.8dBm
018 SET CDMA IM2
	I[0-9]{3}Q[0-9]{3}T[0-9]{3} (numbers change - reading for something, 
		possibly signal strength, quality, etc?
019 TxAgc[P]:000-511	(234)
020 CARRIER: 0-99	(25)
021 Change SIO
	UART->HF
	UART->DM
022 TEST_S:00000-51175
023 MRU3 TABLE
	MRU any number!	(00210350)
024 LOCKED UP test mode first time i tried it (END to exit)
	Second time: Default Act
		NAI SET? C___ : up/down to change values let me scroll through a 
				few then locked test mode again
025 [P] BTF: 0000-5000	(00234)
026 FTM_MODE: 0-1  (0)
027 BT RF TEST
028 BT Tx Ch :00-78	(00)
029 GET RF MODE
030 BT OFF
031 Send Version
	pressing any key sends the phone version in 2 character increments until end of string
032 Send NAM
	pressing any key sends the phone NAM (MIN (your phone number) and SID) in 2 character 
	increments until end of string
	Definition of NAM: A part of the phone that stores a wireless device's phone number, 
	lock code, timer reset code and other user information. The NAM is programmed by the 
	service provider when a device is activated. The NAM also associates the Mobile 
	Identification Number (MIN) with the Electronic Serial Number (ESN).

It should look something like this: (without the spaces)
	XXXXXXXXXX XXXXXXXXXX XX XXXX XXXXXXXXXXXXXXXX
	The first two sets of 10 digits are your phone number, 
	followed by 2 characters (unknown, anyone have any idea?)
	followed by 4 characters that are your security lock code
	followed by 16 characters (unknown, anyone have any idea?)

033 Send S/W Ver
	pressing any key sends the phone version in 2 character increments until end of string
	(mine is 3335)
034 Send ESN
	This is your Electronic Serial Number for your phone, it'll be a unique string of 
	8 hexadecimal digits
	XXXXXXXX
035 No find Cmd
036 Read PL Info
	11 3 300
037 Rebuild Y:1 (shit just rebuilt my phone's EFS?)
	The phone reset to some yellow screen, a bunch of text dumped	
	*0123456S  (first line, its all i had a chance to record!)
	said something about "rebulding EFS", crap that cant be good... 
	Then it restarted again, looks to have reset things back to defaults (like my phone name), 
	ring types, etc but my contacts are still there, as is my downloaded java apps and music 
	(stored on my CF card).  The phone is still programmed too, I made outgoing and incoming 
	calls just to verify

038 No find Cmd
039 NV Backup (alert pops up "Completed")
040 NV Restore (restores from the backup 039 i guess, then "Completed" alert pops up)
041 Backlight: 0-32
042 Lamp 	0	OFF
		1	R
		2	G
		3	B
		4	RG
		5	RB
		6	GB
		7	RGB

043 Vibrator	0	OFF
		1	ON

044 No find Cmd
045
046
047 LCD CONTRAST   
	SubLCD: 0-255    (121)
		(This is contrast for the front display!)
048 Cam FlashOFF
	0	Cam Flash OFF
	1	Cam Flash ON
	2	Camc Flash OFF
	3	Camc Flash ON
049 B_BRIGHT: 0-32 (Main LCD BrightnesS)
050 No Find Cmd
051 BATT TYPE: 2
	BATT_IDV:001
052 BatteryValue
	hit any key switches between TalkBatt and StbyBatt my value is "184" not 
	sure what the scale is im currentlty at 2/3 battery bars, so maybe 0-255 ?
053 StbyBatt_196 -- cannot change but pressing OK saves "completed"
054 TalkBatt_196 -- cannot change but pressing OK saves "completed"
055 Therm_vl:144
056 HDET ADC:255
057 No find Cmd
058
059
060
061 PVgaOff 6 digits meter, values change, mine fluxuates between 200-310
062 018 SET PCS IM2
	I[0-9]{3}Q[0-9]{3}T[0-9]{3} (numbers change - reading for something, 
		possibly signal strength, quality, etc?
063 No find Cmd
064 PRELOAD SIZE
065 Sleep Test (no buttons do anything, but maybe it set a sleep timer for 1 min 
	or something.. waiting to see if anything happens in the next minute or 
	two... 3 minutes later, nothing has happened...cannot exit sleep test mode, 
	closed the screen then reopened it and the phone booted up again like a 
	restart, but now my battery is nearly dead!
066 GPS ANTpath 0-1  (1)
067
068
069
070
071
072
073
074
075
076
077 PCS HAND MIC
	GAIN[00] 077
    PCS HEAD MIC
	GAIN[01] 215
    PCS AHFK MIC
	GAIN[02] 120
    PCS SPKP MIC
	GAIN[03] 110
    PCS BTEM MIC
	GAIN[04] 018
    CEL HAND MIC
	GAIN[05] 077
    CEL HEAD MIC
	GAIN[06] 205
    CEL AHFK MIC
	GAIN[07] 120
    CEL SPKP MIC
	GAIN[08] 120
    CEL BTM MIC
	GAIN[09] 018

078 PCS HAND SPK
	ADD[00] 010
    PCS HEAD SPK
	ADD[01] 038
    PCS AHFK SPK
	ADD[02] 030
    PCS SPKP SPK
	ADD[03] 050
    PCS BTEM SPK
	ADD[04] 030
    CEL HAND SPK
	ADD[05] 010
    CEL HEAD SPK
	ADD[06] 035
    CEL AHFK SPK
	ADD[07] 030
    CEL SPKP SPK
	ADD[08] 050
    CEL BTM SPK
	ADD[09] 030

079 YK RING 01
	+ADD[01] 060
	10 Rings
	10 Melody's
	10 Tones
	1 DL Mel (maybe becuase i've only downloaded one ringtone?)

080 No find cmd
081 GPS MODE App
082 No find cmd
083 D_PCS 0-32768 (06256)
084 No find cmd
085 GPS ANT 0-32768 (00000)
086 GPS BCNT 0-255 (000)
087 GPS LO 32768 (00000)
088 GPS LOSS 0-255 (000)
089 D_GPSC 0-32768 (00000)
090 D_CDMA: 0-32768 (05306)
091 PCS TX BASIS
	ch[0025]-010
	ch 25,50,...1150,1175 through 1175 in 50 increments
	values 0-255
092 CDMATX BASIS
	ch[0] 0000
	channels 0-831 in weird increments
093 ch[   ] 0-255
094 PC RX BASIS
	ch[0025]-010
	ch 25,50,...1150,1175 through 1175 in 50 increments
	values 0-255
095 CDMARX BASIS
	ch[0] 0000
	channels 0-831 in weird increments
096 ch[   ] 0-255

097 no find cmd
098 no find cmd
099 no find cmd

100 	CDMA VGA OFF
	CLNA OFF 2
	CLNA OFF 3
	CLNA OFF 4
	CIM2 | OFF
	CIM2 Q OFF
	CTRANCONDUCT
	PCS VGA OFF
	PLNA OFF 2
	PLNA OFF 3
	PLNA OFF 4
	PIM2 | OFF
	PIM2 Q OFF
	PTRANCONDUCT
	CD TRK VAL
	Stby Battery
	Talk Battery
all have values associated with them, looks like they're all 3 digits

101 No find cmd

...

111 PCS
	Set LNArang [1-4]   (1)

112 	LNA RISE 0	-168
	LNA FALL 0	-168
	LNA RISE 1	-033
	LNA FALL 1	-040
	LNA RISE 2	055
	LNA FALL 2	045
	LNA RISE 3	075
	LNA FALL 3	065
	P DVGA_ADJ_V	065

113	P DVGA	234
	P-77.0dBm
		LNAoff1 251
	P-42.0dBm
		LNAoff2 336
	P-33.8dBm
		LNAoff1 486

114 PDM_val: 0-255  (248)
115 ADC_val: (000)  appears to be a reading of something but always stays at 0
116 no find cmd
117
118
119
120
121 BT PCMLP:
122 BT CONN:
123 No find cmd
124 On Off Test - goes to mains screen with no service, all you can do is turn 
it off and back on. it comes back on to normal phone mode
125 BT Aux PCM
	UseTo: 
	scrolling through locks up the test mode
126 no find cmd
127 	NV_SIO_DEV_M 0408
	NV_TEST_SYS_ 4331
	NV_GPS1_GPS_ 4450
	NV_BC1_GPS1_ 1624
	NV_GPS1_GPS_ 0449
	NV_GPS1_GPS_ 0443
	NV_BCO_GPS_1 1713
	NV_PPP_OCTET 4335
	NV_ACTIVATIO 4334
	NV_QUICK_BOO 4336
	      4612
		seems to be a few blanks here.

128 No find Cmd
129 ********** BIGASS WARNING --- DO NOT USE ********
 CLEAR 000000 
IT CLEARS THE ENTIRE PHONE, Carrier Programming, Phone numebrs, contact list, downloads, 
everything! (unless its stored on the CF, then its fine) There is no prompt to give you 
a chance to not do it, as soon as you hit the numbers "129" you're screwed and will
need to go back to the store to get it reprogrammed!.... unless of course, you did a 
"039 NV Backup beforehand", in which case you could now do a "040 NV Restore" and it'll 
at least recover your phone's programming, but your contact is still nowhere to be found.)

130 R 0x
131
132
133 P_TX0[16]067
134 P_TX1[16]049
135 C ORAS % Fac
	Idx[00] 1129
136 P ORAS % Fac
	Idx[00] 1236
137 C 0 Ch % Fac
	ch0991 0000
138 R 0x
139 P 0 TEMP: -30'C
	ch[0025] 001
140 TxR00 :-002
141   00  
		10 189
142   00  
		0025 359
143 No find cmd
144
145
146
147
148 TX MAX PWR
	TX PWR: 382
150 PCS MODE
	SWEEP CAL
151 SWEEPCALSAVE
152 Can't READ
153 CAM ON/OFF:1
154 CAM FOCUS:0
155 CAM ZOOM :0
156 CAM SHTTR:0
157 CAM SAVETO:0
158 CAM RMVBLE:0
159 Read MIN
160 MP3:1K S ____	
		MP3 TEST
			0 Internal
			1 Flash
161 MP3:1K R ___
162 MP3:1K L ___
163 YKMP: -3600d
	MP HAND Offset
		OST[01] 000
		OST ...
		OST[14]
	HandStepOffset OST[15] 010
164 YKMP: -4580d
	MP HEAD Offset
		OST[01]...OST[14]
	HeadStepOffset OST[15] 000
165 PCM loop ON
166 PCM loop OFF
167 YKMP: -0200d
	Hand RX HPF PCM[01]
	HAND TX HPF PCM[02]
	Hand SL FTR
	Head RX HPF
	Head TX HPF
	Head SL FTR
	AHFK RX HPF
	AHFK TX HPF
	AHFK SL FTR
	SPKR RX HPF
	SPRK TX HPF
	SPKR SL FTR
	BTEM RX HPF
	BTEM TX HPF
	BTEM SL FTR
168
	DLoad Offset
	SmafKey HAND
	SmafKey HEAD
	CamShutter1
	CamShutter2
	CamShutter3
	CamShutter4
	CamShutter5
	Reserved
	Reserved
169	HandSet FIR
	HeadSet FIR
	Speaker FIR
170 VStep Offset
	HandSet Voc
	HeadSet Voc
	Speaker Voc
	BTEM BT Voc

171 Act Date
	0871206830
		erase? 0
172
173
174
180 Auto Vib ON (and it vibrates in pulses)
181 PL info
	erase? 0
182 PL info
	set all1?  0
183
184
185 reboots the phone and does something to the CF card! then reboots again -- checked, 
	still have my files so it didnt format it, not sure what it did
186 looks an aweful lot like 185
187 RESET CHK [0-5]
188 No find cmd
189
190
191
192
193
194
195
196
197
198 CLR ALL MRU!
199 CHG ACCOLC11
200 EXCEPTION ER
	DATA ABORT
201 No find cmd
202
203
204
205
206
207
208
209
210 Read MEID
	0000000000000 (prolly cuz my phone is reset!)
211 no find cmd
...
248 backup erase
	erase? 0
250 Backup ON
251 Normal Mode
252 QBoot? _____0
253 Refurbish
254 DN_2_1X_: ON/OFF
255 No find cmd

The max must be 255 because after 255 the cycle repeats.
eg)

256 No find cmd
257 Suspend
258 Reboot phone
259 No find cmd
260
261
262
263 Get RF mode
	PCS MODE
264 Set RF mode
	0 AMPS MODE
	1 CMDA MODE
	2 PCS MODE
	3 900MH MODE
	4 HDR MODE
265 Setup defal[0-4]
etc


Comments


Posted By: whatup @ 2010-06-19 09:17:05
Subject: helping it if its broken
if it says "initial programming needed" just call *228 and do what they say. it will fix your phone.
Posted By: jimbo @ 2010-05-12 15:28:00
Subject: texting
How do you get to read your text messages using your sub LCD?
Posted By: Evan @ 2010-01-08 14:11:01
Subject: DARYL!
So, where do you find your 6 digit lock code? I currently have 2 u740's, and the one i was using just crapped out... i was wondering if i could take the other one, and just change the phone number on it, and it would work.... Can this be done?
Posted By: @ 2009-12-19 03:24:10
Subject: Change ESN on U740
Hi. I'm trying to change the ESN on a U740. I have CDMA Workshop, QXDM, UniGold and All_Samsung_CDMA and no joy. I can seem to read/write pretty much everything in the phone, except the ESN. I have 5 Bell U740's that I need to change ESN's in, so that I can use them on SaskTEL/Telus - since they don't have the 740's available. Any help would be muchly appreciated.
Posted By: ALSWELL MENSAH @ 2009-12-14 06:04:05
Subject: spc code .
how to change the spc code on my phone .i wont to reach the nam programming. thank you
Posted By: Convicted justin @ 2009-12-12 23:34:58
Subject: Need to get past the initial programing screen
I'm tired of this shit it happend and any code I put in don't work and the people at verizon are punks can anyone help
Posted By: Daryl @ 2009-11-24 18:08:52
Subject: Changing Your MDN / MSID
Had trouble finding this online and ending up figuring it out myself using the codes up top and trying things with them. Anyways Bell wasn't much help, calling the 1-888-4mobile just tells to you to call that number again. And I wasn't paying a rep in the store have my phone match the new number on the network. I wanted to cut an ex-girlfriend from calling me. Went to bell.ca change the number then had this to do. Program phone You must program your phone before you can use it! Once you've programmed your phone, allow 2 to 4 hours for the phone to be activated. Before you start # Make sure your phone's battery is fully charged. # Note the following information: Lock code: XXXXXX Serial or ID number: Your new phone number was my id with no spaces New phone number: (XXX) XXX-XXXX To program your mobile phone, please call 1-800-667-0123 to get help. Order Number: When you're done programming the phone, click Continue. Instead of entering ##786#, enter ##your lock code# and then it will bring you to a menu to edit, view and click done. Enter your new phone number in replacing your old one and your phone should now work. Hope this helps others that just changed their number and doesn't want to pay a store guy to do a 10 sec job for 15 bucks.
Posted By: Arlo @ 2009-07-10 01:09:42
Subject: my list also does not match up.
I was going through this to see if I could turn on the vibrator or the light, but none of the numbers do what they say they do here except for 002. I was hoping someone was willing to take a look at this for this firmware. SW Version: u740_ZL05 ZL05.2 4 2006-12-05 03:40.27 chrono@jskim-z45
Posted By: Dave Wolf @ 2009-06-15 20:33:35
Subject: This list completely different
Hello, This list is completely different from the list that comes up on my Alias. Maybe I have a different hardware update?
Posted By: Daniel @ 2009-06-10 23:49:31
Subject: how save my contact ?
anyone have a idea to save my contact ?
Posted By: Paul @ 2009-03-31 02:01:06
Subject: CAN vs USA
Is this command list applicable to Canadian phones only? I was trying to get my NAM but for me 032 is undefined, 033 is undefined, and 031 is my MRU table. Are there any other known listings of CMDA commands for the u740 perhaps specific to USA?
Posted By: kirp @ 2009-01-18 13:40:33
Subject: mmm
i cant find something good to do to my phone can someone tell me something good??? :)
Posted By: Vinnie @ 2009-01-18 10:41:45
Subject: Mine does not have
i have a u740 butthe settings/tools menu are seperate and the # command does not work but the 47*68#13580 & AH31 what can i do from here service provider MTS
Posted By: Vinnie @ 2009-01-18 10:29:15
Subject: Mine does not have
i have a u740 butthe settings/tools menu are seperate and the # command does not work but the 47*68#13580 & AH31 what can i do from here service provider MTS
Posted By: cdn_grunt.. @ 2008-11-23 20:21:54
Subject: really screwed.
Hi.. Well I learnt my lesson.. don't screw with crap you don't understand. This is where I am. I have a phone that won't hook up to the net, I lost all my contacts and I cannot access my downloads. All because I wanted to lose that little annimation at the beginning "Quickboot". Question is how do I get out of it and how can I reset my phone back to default. I all ready did the "037 - Rebuild your EFS, incase you've screwed it somehow" and it screwed things up more and I still have quickboot on. Ouch.. someone help, my wife is going to kill me.. LOL
Posted By: Jesus @ 2008-10-27 11:40:43
Subject: Contacts
So what happen when all your contacts erase? is there a way to get them back
Posted By: Jimmy_B. @ 2008-09-21 15:28:19
Subject: theres more modes!
ive been just playing around with mine, and theres more options past 265 though i dont know what any of them mean or do
Posted By: Jimmy_B. @ 2008-09-21 15:20:10
Subject: theres more modes!
ive been just playing around with mine, and theres more options past 265 though i dont know what any of them mean or do
Posted By: The Urban Myth @ 2008-09-10 10:38:47
Subject: Wow! Thank You!
Well, I just wanted to say Thank You very much for all your obvious time consuming and potentially stressful research. It is almost impossible to find anything for this model phone. It is appreciated to say the least. Keep up the great work! I'll be watching for more! :D
Posted By: kyle @ 2008-08-26 23:32:27
Subject: What about getting this to work with bitpim..
Have you tried changing the NV_WH_CONFIG yet? would that maybe set it up to be useable in bitpim/qpst?
Posted By: boards @ 2008-08-21 15:15:53
Subject: quit
shit, well i guess i should read first. the quick boot also makes my contats go away and makes mem card unavailable...just resetting it back to zero fixed the problem. i really like the lamp!always on flash.
Posted By: boards @ 2008-08-21 15:09:39
Subject: \quit
how do you quit the test mode?
Posted By: spacle nicker @ 2008-08-17 20:37:01
Subject: WOW
wow u guys are a bunch of idiots!!!! i hope u guys seriously fuck up your fone by doing this.... and y on earth would u wanna do this in the first place! i work with verizon and u guys are retarded!!!!!!
Posted By: rog @ 2008-08-07 16:59:47
Subject: questions but no answers
why is it people ask so many questions but never does anyone answer them ???? I wanna know :o)
Posted By: neo.travis @ 2008-07-22 22:55:32
Subject: I MADE IT WORK!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
Here's the steps need to open the test menu. 1. Menu > Settings & Tools 2. Press # 3. Enter: 000000 4. Press 0 5. Enter: 0 2 1 8 2 4 3 4 4 0 6. USERPREFS Editor 7. Change HIDDEN_MENUS:| from 0 to 1 8. OK 9. Press END 10. Enter 47*68#13580 11. Enjoy
Posted By: Larry @ 2008-07-20 13:14:48
Subject:
All the commands work on mine... MTS canada
Posted By: 71 @ 2008-06-30 21:47:27
Subject: test mode commands
I can't get this to work on my phone. I input ##786# or 47*68#13580 and nothing happens. Send and Ok don't do anything either. Did I miss something?
Posted By: jai @ 2008-06-24 05:54:52
Subject:
oops,. i should read before posting
Posted By: jai @ 2008-06-24 05:54:02
Subject:
299 - vibartor on/off
Posted By: yo @ 2008-06-01 20:34:19
Subject: not working
This isnt working on mine, I guess I am confused as to what to do after I enter 47*68#13580. If I press SEND all it does is call the number and say it doesnt exist..
Posted By: Brian @ 2008-03-18 20:00:44
Subject: quickboot
if you set the u740 as quickboot, is there a way to reset it back to the default way of booting up, as in the booting with the bell logo?
Posted By: Em @ 2008-02-19 22:05:15
Subject: Not working
Its not working on my u740!!
Posted By: super-j @ 2008-02-10 23:11:45
Subject: samsung u740
i wonder in the hidden setting's what SATS mode is for? .....iv looked and had no clue, theres alot in here like for examp. id like to get rid of the loading screen for V-Cast thats retarded and takes too much time...also whats force mode..? any have a answer let me know email is: hondadavidson72@aol.com
Posted By: erg @ 2008-02-07 23:43:08
Subject: quickboot
and I could not access downloads, phone just locked up.
Posted By: erg @ 2008-02-07 23:41:24
Subject: Quickboot
Quickboot=1 made my contacts (and screen saver) go away, contacts returned when quickboot was set back to zero. Be sure to press 'OK' after changing the setting.

Post Comment

Your Name:
Your Email Address: (never posted online)
Subject:
Are you a SPAM Bot?: Type NO in this box

Last Updated: December 19, 2007 @ 11PM
Email: contact <at> u740.ca