Samsung u740 (Dual Flip) Hacking/Applications
Test Mode Commands (Hidden Stuff!)
Disclaimer: Any of the hacks on this site could damage your phone and possibly void your warranty, not to mention is possibly a terms of service dealbreaker for your mobile carrier
<< Back to main index
To view simple phone info, or clear your phone memory, (RTN Menu) from the main screen, enter the following:
##786#
To get into "Test Mode", from the main screen, enter the following:
47*68#13580
You'll see TestMode <M>
The service also goes off, you wont get any calls/texts/etc when in this mode.
Commands are entered as three digit numerical commands, press # to exit a command (you'll see a ".") then its ready for the next command. If you want to cancel a partial command input, press # and you'll get the "." again.
The full list is below, but here's a few of the most useful ones i could find, for you, other commands might be more useful, you decide:
Any missing numbers, or blank numbers are "No find Cmd", aka no such command. All your cmd are belong to us.
002 - Restarts teh phone (to exist Test Mode)
031 - Phone version
032 - Phone NAM
033 - Software version
034 - Phone ESN
037 - Rebuild your EFS, incase you've screwed it somehow
039 - NV Backup
040 - NV Restore
041 - Backlight
043 - Vibrator
047 - Front LCD Contrast
048 - Camera light (incase you want to turn your phone into a flashlight)
049 - Main LCD Brightness
129 - Whipes your whole god damn phone clean
159 - Phone MIN
210 - Phone MEID
252 - Quick Boot (gets rid of the annoying Bell animation/sounds on startup)
So here's what I figured out, in most cases its just what was displayed on the phone, i have no clue what most of it does.
FULL LIST
001 Suspend
002 Restarts Phone
003 No find cmd
004 No find cmd
005 No find cmd
006 No find cmd
007 "Get RF mode"
PCS MODE 0-5
008 "Set RF mode"
PCS MODE
0 AMPS MODE
1 CDMA MODE
2 PCS MODE
3 900MH MODE
4 HDR MODE
009 Setup defal 0-4
010 PA____RA__ 0-1
011 Carrier[P]On
012 Carrier[P]Off
013 Chan[P]: 0-1200 (350)
014 CDATA
015 TrkLo[P]: 0-511 (235)
016 PCS DVGA (numbers change - reading for something, perhaps to do with camera?)
017 P:-77.0dBm
LNAoff0:0255 / -77.0dBm
LNAoff1:0326 / -42.0dBm
LNAoff2:0326 / -33.8dBm
018 SET CDMA IM2
I[0-9]{3}Q[0-9]{3}T[0-9]{3} (numbers change - reading for something,
possibly signal strength, quality, etc?
019 TxAgc[P]:000-511 (234)
020 CARRIER: 0-99 (25)
021 Change SIO
UART->HF
UART->DM
022 TEST_S:00000-51175
023 MRU3 TABLE
MRU any number! (00210350)
024 LOCKED UP test mode first time i tried it (END to exit)
Second time: Default Act
NAI SET? C___ : up/down to change values let me scroll through a
few then locked test mode again
025 [P] BTF: 0000-5000 (00234)
026 FTM_MODE: 0-1 (0)
027 BT RF TEST
028 BT Tx Ch :00-78 (00)
029 GET RF MODE
030 BT OFF
031 Send Version
pressing any key sends the phone version in 2 character increments until end of string
032 Send NAM
pressing any key sends the phone NAM (MIN (your phone number) and SID) in 2 character
increments until end of string
Definition of NAM: A part of the phone that stores a wireless device's phone number,
lock code, timer reset code and other user information. The NAM is programmed by the
service provider when a device is activated. The NAM also associates the Mobile
Identification Number (MIN) with the Electronic Serial Number (ESN).
It should look something like this: (without the spaces)
XXXXXXXXXX XXXXXXXXXX XX XXXX XXXXXXXXXXXXXXXX
The first two sets of 10 digits are your phone number,
followed by 2 characters (unknown, anyone have any idea?)
followed by 4 characters that are your security lock code
followed by 16 characters (unknown, anyone have any idea?)
033 Send S/W Ver
pressing any key sends the phone version in 2 character increments until end of string
(mine is 3335)
034 Send ESN
This is your Electronic Serial Number for your phone, it'll be a unique string of
8 hexadecimal digits
XXXXXXXX
035 No find Cmd
036 Read PL Info
11 3 300
037 Rebuild Y:1 (shit just rebuilt my phone's EFS?)
The phone reset to some yellow screen, a bunch of text dumped
*0123456S (first line, its all i had a chance to record!)
said something about "rebulding EFS", crap that cant be good...
Then it restarted again, looks to have reset things back to defaults (like my phone name),
ring types, etc but my contacts are still there, as is my downloaded java apps and music
(stored on my CF card). The phone is still programmed too, I made outgoing and incoming
calls just to verify
038 No find Cmd
039 NV Backup (alert pops up "Completed")
040 NV Restore (restores from the backup 039 i guess, then "Completed" alert pops up)
041 Backlight: 0-32
042 Lamp 0 OFF
1 R
2 G
3 B
4 RG
5 RB
6 GB
7 RGB
043 Vibrator 0 OFF
1 ON
044 No find Cmd
045
046
047 LCD CONTRAST
SubLCD: 0-255 (121)
(This is contrast for the front display!)
048 Cam FlashOFF
0 Cam Flash OFF
1 Cam Flash ON
2 Camc Flash OFF
3 Camc Flash ON
049 B_BRIGHT: 0-32 (Main LCD BrightnesS)
050 No Find Cmd
051 BATT TYPE: 2
BATT_IDV:001
052 BatteryValue
hit any key switches between TalkBatt and StbyBatt my value is "184" not
sure what the scale is im currentlty at 2/3 battery bars, so maybe 0-255 ?
053 StbyBatt_196 -- cannot change but pressing OK saves "completed"
054 TalkBatt_196 -- cannot change but pressing OK saves "completed"
055 Therm_vl:144
056 HDET ADC:255
057 No find Cmd
058
059
060
061 PVgaOff 6 digits meter, values change, mine fluxuates between 200-310
062 018 SET PCS IM2
I[0-9]{3}Q[0-9]{3}T[0-9]{3} (numbers change - reading for something,
possibly signal strength, quality, etc?
063 No find Cmd
064 PRELOAD SIZE
065 Sleep Test (no buttons do anything, but maybe it set a sleep timer for 1 min
or something.. waiting to see if anything happens in the next minute or
two... 3 minutes later, nothing has happened...cannot exit sleep test mode,
closed the screen then reopened it and the phone booted up again like a
restart, but now my battery is nearly dead!
066 GPS ANTpath 0-1 (1)
067
068
069
070
071
072
073
074
075
076
077 PCS HAND MIC
GAIN[00] 077
PCS HEAD MIC
GAIN[01] 215
PCS AHFK MIC
GAIN[02] 120
PCS SPKP MIC
GAIN[03] 110
PCS BTEM MIC
GAIN[04] 018
CEL HAND MIC
GAIN[05] 077
CEL HEAD MIC
GAIN[06] 205
CEL AHFK MIC
GAIN[07] 120
CEL SPKP MIC
GAIN[08] 120
CEL BTM MIC
GAIN[09] 018
078 PCS HAND SPK
ADD[00] 010
PCS HEAD SPK
ADD[01] 038
PCS AHFK SPK
ADD[02] 030
PCS SPKP SPK
ADD[03] 050
PCS BTEM SPK
ADD[04] 030
CEL HAND SPK
ADD[05] 010
CEL HEAD SPK
ADD[06] 035
CEL AHFK SPK
ADD[07] 030
CEL SPKP SPK
ADD[08] 050
CEL BTM SPK
ADD[09] 030
079 YK RING 01
+ADD[01] 060
10 Rings
10 Melody's
10 Tones
1 DL Mel (maybe becuase i've only downloaded one ringtone?)
080 No find cmd
081 GPS MODE App
082 No find cmd
083 D_PCS 0-32768 (06256)
084 No find cmd
085 GPS ANT 0-32768 (00000)
086 GPS BCNT 0-255 (000)
087 GPS LO 32768 (00000)
088 GPS LOSS 0-255 (000)
089 D_GPSC 0-32768 (00000)
090 D_CDMA: 0-32768 (05306)
091 PCS TX BASIS
ch[0025]-010
ch 25,50,...1150,1175 through 1175 in 50 increments
values 0-255
092 CDMATX BASIS
ch[0] 0000
channels 0-831 in weird increments
093 ch[ ] 0-255
094 PC RX BASIS
ch[0025]-010
ch 25,50,...1150,1175 through 1175 in 50 increments
values 0-255
095 CDMARX BASIS
ch[0] 0000
channels 0-831 in weird increments
096 ch[ ] 0-255
097 no find cmd
098 no find cmd
099 no find cmd
100 CDMA VGA OFF
CLNA OFF 2
CLNA OFF 3
CLNA OFF 4
CIM2 | OFF
CIM2 Q OFF
CTRANCONDUCT
PCS VGA OFF
PLNA OFF 2
PLNA OFF 3
PLNA OFF 4
PIM2 | OFF
PIM2 Q OFF
PTRANCONDUCT
CD TRK VAL
Stby Battery
Talk Battery
all have values associated with them, looks like they're all 3 digits
101 No find cmd
...
111 PCS
Set LNArang [1-4] (1)
112 LNA RISE 0 -168
LNA FALL 0 -168
LNA RISE 1 -033
LNA FALL 1 -040
LNA RISE 2 055
LNA FALL 2 045
LNA RISE 3 075
LNA FALL 3 065
P DVGA_ADJ_V 065
113 P DVGA 234
P-77.0dBm
LNAoff1 251
P-42.0dBm
LNAoff2 336
P-33.8dBm
LNAoff1 486
114 PDM_val: 0-255 (248)
115 ADC_val: (000) appears to be a reading of something but always stays at 0
116 no find cmd
117
118
119
120
121 BT PCMLP:
122 BT CONN:
123 No find cmd
124 On Off Test - goes to mains screen with no service, all you can do is turn
it off and back on. it comes back on to normal phone mode
125 BT Aux PCM
UseTo:
scrolling through locks up the test mode
126 no find cmd
127 NV_SIO_DEV_M 0408
NV_TEST_SYS_ 4331
NV_GPS1_GPS_ 4450
NV_BC1_GPS1_ 1624
NV_GPS1_GPS_ 0449
NV_GPS1_GPS_ 0443
NV_BCO_GPS_1 1713
NV_PPP_OCTET 4335
NV_ACTIVATIO 4334
NV_QUICK_BOO 4336
4612
seems to be a few blanks here.
128 No find Cmd
129 ********** BIGASS WARNING --- DO NOT USE ********
CLEAR 000000
IT CLEARS THE ENTIRE PHONE, Carrier Programming, Phone numebrs, contact list, downloads,
everything! (unless its stored on the CF, then its fine) There is no prompt to give you
a chance to not do it, as soon as you hit the numbers "129" you're screwed and will
need to go back to the store to get it reprogrammed!.... unless of course, you did a
"039 NV Backup beforehand", in which case you could now do a "040 NV Restore" and it'll
at least recover your phone's programming, but your contact is still nowhere to be found.)
130 R 0x
131
132
133 P_TX0[16]067
134 P_TX1[16]049
135 C ORAS % Fac
Idx[00] 1129
136 P ORAS % Fac
Idx[00] 1236
137 C 0 Ch % Fac
ch0991 0000
138 R 0x
139 P 0 TEMP: -30'C
ch[0025] 001
140 TxR00 :-002
141 00
10 189
142 00
0025 359
143 No find cmd
144
145
146
147
148 TX MAX PWR
TX PWR: 382
150 PCS MODE
SWEEP CAL
151 SWEEPCALSAVE
152 Can't READ
153 CAM ON/OFF:1
154 CAM FOCUS:0
155 CAM ZOOM :0
156 CAM SHTTR:0
157 CAM SAVETO:0
158 CAM RMVBLE:0
159 Read MIN
160 MP3:1K S ____
MP3 TEST
0 Internal
1 Flash
161 MP3:1K R ___
162 MP3:1K L ___
163 YKMP: -3600d
MP HAND Offset
OST[01] 000
OST ...
OST[14]
HandStepOffset OST[15] 010
164 YKMP: -4580d
MP HEAD Offset
OST[01]...OST[14]
HeadStepOffset OST[15] 000
165 PCM loop ON
166 PCM loop OFF
167 YKMP: -0200d
Hand RX HPF PCM[01]
HAND TX HPF PCM[02]
Hand SL FTR
Head RX HPF
Head TX HPF
Head SL FTR
AHFK RX HPF
AHFK TX HPF
AHFK SL FTR
SPKR RX HPF
SPRK TX HPF
SPKR SL FTR
BTEM RX HPF
BTEM TX HPF
BTEM SL FTR
168
DLoad Offset
SmafKey HAND
SmafKey HEAD
CamShutter1
CamShutter2
CamShutter3
CamShutter4
CamShutter5
Reserved
Reserved
169 HandSet FIR
HeadSet FIR
Speaker FIR
170 VStep Offset
HandSet Voc
HeadSet Voc
Speaker Voc
BTEM BT Voc
171 Act Date
0871206830
erase? 0
172
173
174
180 Auto Vib ON (and it vibrates in pulses)
181 PL info
erase? 0
182 PL info
set all1? 0
183
184
185 reboots the phone and does something to the CF card! then reboots again -- checked,
still have my files so it didnt format it, not sure what it did
186 looks an aweful lot like 185
187 RESET CHK [0-5]
188 No find cmd
189
190
191
192
193
194
195
196
197
198 CLR ALL MRU!
199 CHG ACCOLC11
200 EXCEPTION ER
DATA ABORT
201 No find cmd
202
203
204
205
206
207
208
209
210 Read MEID
0000000000000 (prolly cuz my phone is reset!)
211 no find cmd
...
248 backup erase
erase? 0
250 Backup ON
251 Normal Mode
252 QBoot? _____0
253 Refurbish
254 DN_2_1X_: ON/OFF
255 No find cmd
The max must be 255 because after 255 the cycle repeats.
eg)
256 No find cmd
257 Suspend
258 Reboot phone
259 No find cmd
260
261
262
263 Get RF mode
PCS MODE
264 Set RF mode
0 AMPS MODE
1 CMDA MODE
2 PCS MODE
3 900MH MODE
4 HDR MODE
265 Setup defal[0-4]
etc
Comments
Post Comment
Last Updated: December 19, 2007 @ 11PM
Email: contact <at> u740.ca
Posted By: Evan @ 2010-01-08 14:11:01
Subject: DARYL!
So, where do you find your 6 digit lock code? I currently have 2 u740's, and the one i was using just crapped out... i was wondering if i could take the other one, and just change the phone number on it, and it would work.... Can this be done?
Posted By: @ 2009-12-19 03:24:10
Subject: Change ESN on U740
Hi. I'm trying to change the ESN on a U740. I have CDMA Workshop, QXDM, UniGold and All_Samsung_CDMA and no joy. I can seem to read/write pretty much everything in the phone, except the ESN. I have 5 Bell U740's that I need to change ESN's in, so that I can use them on SaskTEL/Telus - since they don't have the 740's available. Any help would be muchly appreciated.
Posted By: ALSWELL MENSAH @ 2009-12-14 06:04:05
Subject: spc code .
how to change the spc code on my phone .i wont to reach the nam programming. thank you
Posted By: Convicted justin @ 2009-12-12 23:34:58
Subject: Need to get past the initial programing screen
I'm tired of this shit it happend and any code I put in don't work and the people at verizon are punks can anyone help
Posted By: Daryl @ 2009-11-24 18:08:52
Subject: Changing Your MDN / MSID
Had trouble finding this online and ending up figuring it out myself using the codes up top and trying things with them. Anyways Bell wasn't much help, calling the 1-888-4mobile just tells to you to call that number again. And I wasn't paying a rep in the store have my phone match the new number on the network. I wanted to cut an ex-girlfriend from calling me. Went to bell.ca change the number then had this to do. Program phone You must program your phone before you can use it! Once you've programmed your phone, allow 2 to 4 hours for the phone to be activated. Before you start # Make sure your phone's battery is fully charged. # Note the following information: Lock code: XXXXXX Serial or ID number: Your new phone number was my id with no spaces New phone number: (XXX) XXX-XXXX To program your mobile phone, please call 1-800-667-0123 to get help. Order Number: When you're done programming the phone, click Continue. Instead of entering ##786#, enter ##your lock code# and then it will bring you to a menu to edit, view and click done. Enter your new phone number in replacing your old one and your phone should now work. Hope this helps others that just changed their number and doesn't want to pay a store guy to do a 10 sec job for 15 bucks.
Posted By: Arlo @ 2009-07-10 01:09:42
Subject: my list also does not match up.
I was going through this to see if I could turn on the vibrator or the light, but none of the numbers do what they say they do here except for 002. I was hoping someone was willing to take a look at this for this firmware. SW Version: u740_ZL05 ZL05.2 4 2006-12-05 03:40.27 chrono@jskim-z45
Posted By: Dave Wolf @ 2009-06-15 20:33:35
Subject: This list completely different
Hello, This list is completely different from the list that comes up on my Alias. Maybe I have a different hardware update?
Posted By: Daniel @ 2009-06-10 23:49:31
Subject: how save my contact ?
anyone have a idea to save my contact ?
Posted By: Paul @ 2009-03-31 02:01:06
Subject: CAN vs USA
Is this command list applicable to Canadian phones only? I was trying to get my NAM but for me 032 is undefined, 033 is undefined, and 031 is my MRU table. Are there any other known listings of CMDA commands for the u740 perhaps specific to USA?
Posted By: kirp @ 2009-01-18 13:40:33
Subject: mmm
i cant find something good to do to my phone can someone tell me something good??? :)
Posted By: Vinnie @ 2009-01-18 10:41:45
Subject: Mine does not have
i have a u740 butthe settings/tools menu are seperate and the # command does not work but the 47*68#13580 & AH31 what can i do from here service provider MTS
Posted By: Vinnie @ 2009-01-18 10:29:15
Subject: Mine does not have
i have a u740 butthe settings/tools menu are seperate and the # command does not work but the 47*68#13580 & AH31 what can i do from here service provider MTS
Posted By: cdn_grunt.. @ 2008-11-23 20:21:54
Subject: really screwed.
Hi.. Well I learnt my lesson.. don't screw with crap you don't understand. This is where I am. I have a phone that won't hook up to the net, I lost all my contacts and I cannot access my downloads. All because I wanted to lose that little annimation at the beginning "Quickboot". Question is how do I get out of it and how can I reset my phone back to default. I all ready did the "037 - Rebuild your EFS, incase you've screwed it somehow" and it screwed things up more and I still have quickboot on. Ouch.. someone help, my wife is going to kill me.. LOL
Posted By: Jesus @ 2008-10-27 11:40:43
Subject: Contacts
So what happen when all your contacts erase? is there a way to get them back
Posted By: Jimmy_B. @ 2008-09-21 15:28:19
Subject: theres more modes!
ive been just playing around with mine, and theres more options past 265 though i dont know what any of them mean or do
Posted By: Jimmy_B. @ 2008-09-21 15:20:10
Subject: theres more modes!
ive been just playing around with mine, and theres more options past 265 though i dont know what any of them mean or do
Posted By: The Urban Myth @ 2008-09-10 10:38:47
Subject: Wow! Thank You!
Well, I just wanted to say Thank You very much for all your obvious time consuming and potentially stressful research. It is almost impossible to find anything for this model phone. It is appreciated to say the least. Keep up the great work! I'll be watching for more! :D
Posted By: kyle @ 2008-08-26 23:32:27
Subject: What about getting this to work with bitpim..
Have you tried changing the NV_WH_CONFIG yet? would that maybe set it up to be useable in bitpim/qpst?
Posted By: boards @ 2008-08-21 15:15:53
Subject: quit
shit, well i guess i should read first. the quick boot also makes my contats go away and makes mem card unavailable...just resetting it back to zero fixed the problem. i really like the lamp!always on flash.
Posted By: boards @ 2008-08-21 15:09:39
Subject: \quit
how do you quit the test mode?
Posted By: spacle nicker @ 2008-08-17 20:37:01
Subject: WOW
wow u guys are a bunch of idiots!!!! i hope u guys seriously fuck up your fone by doing this.... and y on earth would u wanna do this in the first place! i work with verizon and u guys are retarded!!!!!!
Posted By: rog @ 2008-08-07 16:59:47
Subject: questions but no answers
why is it people ask so many questions but never does anyone answer them ???? I wanna know :o)
Posted By: neo.travis @ 2008-07-22 22:55:32
Subject: I MADE IT WORK!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
Here's the steps need to open the test menu. 1. Menu > Settings & Tools 2. Press # 3. Enter: 000000 4. Press 0 5. Enter: 0 2 1 8 2 4 3 4 4 0 6. USERPREFS Editor 7. Change HIDDEN_MENUS:| from 0 to 1 8. OK 9. Press END 10. Enter 47*68#13580 11. Enjoy
Posted By: Larry @ 2008-07-20 13:14:48
Subject:
All the commands work on mine... MTS canada
Posted By: 71 @ 2008-06-30 21:47:27
Subject: test mode commands
I can't get this to work on my phone. I input ##786# or 47*68#13580 and nothing happens. Send and Ok don't do anything either. Did I miss something?
Posted By: jai @ 2008-06-24 05:54:52
Subject:
oops,. i should read before posting
Posted By: jai @ 2008-06-24 05:54:02
Subject:
299 - vibartor on/off
Posted By: yo @ 2008-06-01 20:34:19
Subject: not working
This isnt working on mine, I guess I am confused as to what to do after I enter 47*68#13580. If I press SEND all it does is call the number and say it doesnt exist..
Posted By: Brian @ 2008-03-18 20:00:44
Subject: quickboot
if you set the u740 as quickboot, is there a way to reset it back to the default way of booting up, as in the booting with the bell logo?
Posted By: Em @ 2008-02-19 22:05:15
Subject: Not working
Its not working on my u740!!
Posted By: super-j @ 2008-02-10 23:11:45
Subject: samsung u740
i wonder in the hidden setting's what SATS mode is for? .....iv looked and had no clue, theres alot in here like for examp. id like to get rid of the loading screen for V-Cast thats retarded and takes too much time...also whats force mode..? any have a answer let me know email is: hondadavidson72@aol.com
Posted By: erg @ 2008-02-07 23:43:08
Subject: quickboot
and I could not access downloads, phone just locked up.
Posted By: erg @ 2008-02-07 23:41:24
Subject: Quickboot
Quickboot=1 made my contacts (and screen saver) go away, contacts returned when quickboot was set back to zero. Be sure to press 'OK' after changing the setting.