IOTHiddenMenu (USB Settings, LTE Settings, Test Mode, Dialer codes, etc)

autoprime · Aug 5, 2012

Most noteworthy edits include LTE only mode, LTE/CDMA mode(no 3G) and NV BACKUP/RESTORE. Nice little all-in-one shortcut for most of the hidden menus on this device.

If there is another thread on this in the Sprint Galaxy S III forums I apologize. Just going to outline this menu which is found on stock Sprint GS3 Touchwiz roms.

Getting Started
You can use Any Cut, Better Cut, Nova Launcher etc etc to make a shortcut to this menu.
1. Better Cut > New ShortCut > No > All Activities > IOTHiddenMenu(first one listed).
2. Any Cut > ?
3. Nova Launcher > Long press on home screen > Shortcuts > Activities > Scroll to IOTHiddenMenu and click it to expand > Scroll down to the first IOTHiddenMenu in that list(under GPSCLRX)

Now we can open our new shortcut and you should see the following screen...

USBSetting Menu
This menu switches the phone's USB mode when connected to a computer.

MTP (Media Transfer Protocol; device shows up as USB drive)
MTP + ADB (default setting; should be self-explanatory)
PTP (Picture Transfer Protocol; device shows up as camera)
PTP + ADB (should be self-explanatory)
RMNET + DM + MODEM (RMNet = USB virtual Ethernet framework; DM = Diagnostic Mode; Modem = self-explanatory)
DM + MODEM + ADB (self-explanatory) (best setting when using QPST/QXDM/etc)

LTE Mode Menu
I do not have LTE in my area yet. Could anyone detail what some of the options below do exactly? I'm sure one is for LTE only.
TestMode Menu > CDMA > COMMON > NEXT PAGE > NEXT PAGE > PREF MODE SET may be the better alternative to this.

LTE Service Forced
Enable LTE Mode
Enable GLOBAL Mode
Enable CDMA Mode (default)

TestMode Menu

1. UMTS
UMTS > COMMON > NV REBUILD (NV REBUILD, NV BACKUP, NV RESTORE)
Everything else under UMTS either doesn't work.. or isn't worth messing with.
2. CDMA
CDMA > COMMON > NEXT PAGE > NEXT PAGE > PREF MODE SET (CDMA/EVDO/LTE, GSM/WCDMA, LTE ONLY, CDMA/LTE, CDMA ONLY, EVDO ONLY)
Everything else under CDMA either doesn't work.. or isn't worth messing with.
3. LTE
Nothing of interest.. just displays LTE debug status.
4. SIM
SIM > CHECK NV (Helps identify possible incorrect settings. Displays current PREF MODE. NV should be set under RTRE Config.)
Not worth messing with anything else in here.
5. run EFS SYNC()
Doesn't do anything.

There are lots of other options in here to mess with but most are broken, not supported or just really not worth messing with. All the MSL settings for example... no matter what.. I can't seem to read/write a new MSL via Test Mode. CDMA > CONTROL > MSL Edit has broken my MSL. *Update* Fixed MSL. I also messed up my EFS playing with the wrong stuff. I was able to recover.. but BE CAREFUL!!

##DATA# Menu
Same menu as hitting ##DATA# on dialer.

View

Data Profile - view current data profile
EVDO - view DDTM setting
Advanced - view MEID, Vocoder, Slotted Index, ACCOLC etc
USB Charging - view USB Charging setting
eHRPD - view eHRPD setting
PRL Write - Write new PRL with this option. PRL you are writing must be in root of storage and named test.prl
NAM Block - ??? can anyone explain this?
Others - view multimedia proxy values(Browser, MMSC, DSS)

Edit

Data Profile - edit data profile
EVDO - enable/disable DDTM
Advanced - edit Vocoder, Slotted Index, ACCOLC etc
USB Charging - enable/disable USB Charging
eHRPD - enable/disable eHRPD
Others
1. Browser - edit browser gateway ip/port/secure port
2. MMSC URL - edit MMS url
3. DSS - edit DSS server
4. Multimedia - edit RTSP and HTTPPD proxy settings
5. RC Data -
6. HDR/1X Selection - sets data mode... hybrid, cdma only, evdo only etc..
7. Voice Privacy - enable/disable voice privacy (disabled by default)
8. DTMF Set - set short/long DTMF
9. Toggle NAI - enable/disable NAI (enabled by default)
10. Korea Mode Set - don't mess with this
11. LTE APN Settings - set LTE APN
12. Dial Up Networking - enable/disable Dial Up Networking (off by default)

##MSL# Menu
View - view current phone number/msid set.
Edit - write new phone number/msid

##DEBUG# Menu
Various data debug menus. Nothing new here.

##Phone Util# Menu
UART pda/modem settings. This isn't really needed.

##RTN# Menu
Nothing new here. Same as ##786# dialer code. View phone information for perform a full reset on your device. This wipes /data and /internal memory as well as wiping all OTA provision settings.

Dialer Codes

Code:

##CLEAR# - Reset phone's network settings
##DSA# - DSSOption
##GPSCLRX# - Clear GPS Data
##LOG# - SysDump
##RTN# - RTN Menu (View/Reset)
##SCRTN# - Force OTA reprovisioning
##TTY# - TTY Test Mode
##DEBUG# - Debug Menu - 777468 (1x Eng, 1x Eng Protocol, EVDO Eng RF, EVDO Eng Protocol, LTE Eng, Configuration, Bluetooth, Data Status, eHRPD Eng, Others)
##DATA# - Data Menu (View/Edit)
*#06# - Display MSL
*#22558463# - Total Call Time Reset
*#232331# - Bluetooth RF Field Test
*#1111# - Read FTA SW Version
*#2222# - Read FTA HW Version
*#0228# - Battery Status
*#7284# - Phone Util

boomerbubba · Aug 5, 2012

autoprime said:
##DEBUG# Menu
Various data debug menus. Nothing new here.

The ##DEBUG# Menu includes the LTE Engineering information screen, which is the only place to find the proper signal strength (RSRP) and signal quality (RSRQ) of a live LTE connection.

gtuansdiamm · Aug 5, 2012

I was playing with that and tried Korea mode think it would put the phone in Korean
Disappointingly it didn't now I can't connect to sprint 3g
Some one help

Sent from my SPH-L710 using xda premium

Edit: oh god I should have read the op
He said not to mess with it oh noooo

gtuansdiamm · Aug 5, 2012

It seems like my username has been erased
How do I undo it
To undo it I need to know it first how do I learn it

Sent from my SPH-L710 using xda premium

LordLugard · Aug 5, 2012

gtuansdiamm said:
It seems like my username has been erased
How do I undo it
To undo it I need to know it first how do I learn it

Sent from my SPH-L710 using xda premium

If you have your MSL, you can ##3282#, edit, enter MSL and manually input your username@sprintpcs.com...

Sent from my SPH-L710

autoprime · Aug 5, 2012

gtuansdiamm said:
It seems like my username has been erased
How do I undo it
To undo it I need to know it first how do I learn it

run your NV RESTORE... TestMode > UMTS > COMMON > NV REBUILD > NV RESTORE. Make sure you hit the RESTORE setting and not Rebuild/Backup. The last thing you want to do is create a backup of bad nv settings(such as nv settings all being set for Korea mode). After you hit RESTORE the phone should reboot within a few seconds... wait it out. Your phone should now be unprovisioned... so it should try to OTA and that's that. If for some reason the "sktelecom" settings are still set... try running NV RESTORE one more time. If it STILL isn't fixed after that.. let me know. There are a few things we can do. Last night I messed my NV and EFS up pretty bad(sorta on purpose lol) but I was able to recover from everything. Even Korea mode.

gtuansdiamm · Aug 5, 2012

Thanks man it worked perfectly
I tried updating profile and it did restore my username but not my 3g
You saved me a whole lot of time talking to sprint customer service bots

Sent from my SPH-L710 using xda premium

trim81 · Aug 7, 2012

Auto
prime glad to see you have this phone. I follow your work on previous phones

I'm getting mine in a few days.

Question:

How do I backup NV? Where does it back up the items to? Internal memory?

Is it the same as backing up. NV 1192, 465, 466, and 1194?

autoprime · Aug 9, 2012

trim81 said:
Auto
prime glad to see you have this phone. I follow your work on previous phones

I'm getting mine in a few days.

Question:

How do I backup NV? Where does it back up the items to? Internal memory?

Is it the same as backing up. NV 1192, 465, 466, and 1194?

hmm good question. to be honest im not sure where it backs up the files. pretty sure theyd still be in NV somewhere.

what you should do is connect gs3 to qxdm.. send 16-digit pass(same as epic/e4gt/etc).. then close qxdm and open up QPST EFS Explorer. All NV items will be unlocked in NVM > NUM. i think thats the folder anyway.. doing this all from memory. but ya... 1192 etc will now be viewable in EFS EXP when you send pw in QXDM first. No more "denied access" in CDMA WS

trim81 · Aug 9, 2012

@auto

Have you figured out LTE is simply a MAC ID authentication?

Can we change LTE Macs and be connected like WIMAX?

billard412 · Aug 9, 2012

Was going to do this as well

But the first 2 posts after the op's were my exact motivation in changing my mind. I had a feeling people would b ****n there **** up playin in it lol. Nevertheless, nice job OP, looks sharp. Well detailed too

Max_Pain · Aug 14, 2012

anyone know where the settings are for MMS?

I'm trying to figure out how to send MMS on MetroPCS. on the Evo's I used a APN method, but apparently ICS doesn't allow 3rd party apps to write to APN. so I'm trying to enter the values manually. got into the DATA menu, entered a couple of the values, but a few other other values from that APN file are nowhere to be found in the DATA menu...and QPST refuses to see my phone?

any info on this would be great!

Mod57 · Aug 20, 2012

USCC

autoprime I have a USCC phone and have had no luck backing up the IMEI using the conventional QPST method. I have been searching Sprints info because some have had a similar problem.

When I try QPST it stops at 16% and says: "Roaming Lists could not be read".
Tried multiple times no luck.

I made a short cut to my hidden menus and everything looks to be the same as the OP.

My IMEI is currently fine.

That being the case is there a way to make a good backup now and restore it if things go bad? If this is possible can the backup be accessed and stored on a pc?

My goal is to find a way to back up the IMEI for myself and other USCC sg3 users. Any help would be very appreciated.

autoprime · Aug 20, 2012

Mod57 said:
autoprime I have a USCC phone and have had no luck backing up the IMEI using the conventional QPST method. I have been searching Sprints info because some have had a similar problem.

When I try QPST it stops at 16% and says: "Roaming Lists could not be read".
Tried multiple times no luck.

Which QPST program exactly is giving you this error? Also, random question for you... do the USCC Samsung devices have a 16 digit password that's used in QXDM? All Verizon Samsung's share the same password.. all Sprint Samsung's share the same password. You guys are kinda similar to Verizon's right.. same radio and all? so you know if 2010031619780721 works? Do you have QXDM or CDMA WS installed? Need to be able to send that password to the phone to fully unlock. then we'll work on backing up IMEI.

Mod57 said:
That being the case is there a way to make a good backup now and restore it if things go bad? If this is possible can the backup be accessed and stored on a pc?

Are you referring to the NV RESTORE TestMode options? If so, I know of no current method to save that backup to a PC.

The TestMode NV RESTORE option should be pretty solid... if your phone boots.. you should be able to get to that menu. Same would be needed to get to QPST(booting phone).

So get back to me on which QPST app you're trying.. and what exactly is giving you the error... as well as any info on a 16 digit QXDM password.

PUNCHYS · Oct 7, 2012

Hey autoprime, i changed the korea mode on my phone before ever reading your warning. I have no data connection unless im on WiFi. Is it related to my change, if so do you or anyone have any idea how to fix it. Please. Im on freezas jelly bean leak lih

autoprime · Oct 21, 2012

PUNCHYS said:
Hey autoprime, i changed the korea mode on my phone before ever reading your warning. I have no data connection unless im on WiFi. Is it related to my change, if so do you or anyone have any idea how to fix it. Please. Im on freezas jelly bean leak lih

sorry for the delay in response. i assume you got this fixed?

Post #6 on the first page of this thread has a fix if you messed with korea mode. you may need to go back to ICS for this instead of Jellybean.

narcarsiss · Oct 22, 2012

ATT: NAM BLOCK;

the Mobile Object Model (MOM) can be categorized as PRL and NAM, with the NAM blocks existing as several different types. For example, the MDN NAM block holds the directory number for calling the mobile. The CDMA NAM block holds parameters used when the mobile is operating in the PCS spectrum. The Dual Mode NAM block holds parameters used by a PCS or CDMA mobile while it is being used in the CDMA/analog spectrum. The IMSI_T block holds the true IMSI of the mobile station

hope this helps.

autoprime said:
Most noteworthy edits include LTE only mode, LTE/CDMA mode(no 3G) and NV BACKUP/RESTORE. Nice little all-in-one shortcut for most of the hidden menus on this device.

If there is another thread on this in the Sprint Galaxy S III forums I apologize. Just going to outline this menu which is found on stock Sprint GS3 Touchwiz roms.

Getting Started
You can use Any Cut, Better Cut, Nova Launcher etc etc to make a shortcut to this menu.
1. Better Cut > New ShortCut > No > All Activities > IOTHiddenMenu(first one listed).
2. Any Cut > ?
3. Nova Launcher > Long press on home screen > Shortcuts > Activities > Scroll to IOTHiddenMenu and click it to expand > Scroll down to the first IOTHiddenMenu in that list(under GPSCLRX)

Now we can open our new shortcut and you should see the following screen...

USBSetting Menu
This menu switches the phone's USB mode when connected to a computer.

MTP (Media Transfer Protocol; device shows up as USB drive)
MTP + ADB (default setting; should be self-explanatory)
PTP (Picture Transfer Protocol; device shows up as camera)
PTP + ADB (should be self-explanatory)
RMNET + DM + MODEM (RMNet = USB virtual Ethernet framework; DM = Diagnostic Mode; Modem = self-explanatory)
DM + MODEM + ADB (self-explanatory) (best setting when using QPST/QXDM/etc)

LTE Mode Menu
I do not have LTE in my area yet. Could anyone detail what some of the options below do exactly? I'm sure one is for LTE only.
TestMode Menu > CDMA > COMMON > NEXT PAGE > NEXT PAGE > PREF MODE SET may be the better alternative to this.

LTE Service Forced
Enable LTE Mode
Enable GLOBAL Mode
Enable CDMA Mode (default)

TestMode Menu

1. UMTS
UMTS > COMMON > NV REBUILD (NV REBUILD, NV BACKUP, NV RESTORE)
Everything else under UMTS either doesn't work.. or isn't worth messing with.
2. CDMA
CDMA > COMMON > NEXT PAGE > NEXT PAGE > PREF MODE SET (CDMA/EVDO/LTE, GSM/WCDMA, LTE ONLY, CDMA/LTE, CDMA ONLY, EVDO ONLY)
Everything else under CDMA either doesn't work.. or isn't worth messing with.
3. LTE
Nothing of interest.. just displays LTE debug status.
4. SIM
SIM > CHECK NV (Helps identify possible incorrect settings. Displays current PREF MODE. NV should be set under RTRE Config.)
Not worth messing with anything else in here.
5. run EFS SYNC()
Doesn't do anything.

There are lots of other options in here to mess with but most are broken, not supported or just really not worth messing with. All the MSL settings for example... no matter what.. I can't seem to read/write a new MSL via Test Mode. CDMA > CONTROL > MSL Edit has broken my MSL. *Update* Fixed MSL. I also messed up my EFS playing with the wrong stuff. I was able to recover.. but BE CAREFUL!!

##DATA# Menu
Same menu as hitting ##DATA# on dialer.

View

Data Profile - view current data profile

EVDO - view DDTM setting

Advanced - view MEID, Vocoder, Slotted Index, ACCOLC etc

USB Charging - view USB Charging setting

eHRPD - view eHRPD setting

PRL Write - Write new PRL with this option. PRL you are writing must be in root of storage and named test.prl

NAM Block - ??? can anyone explain this?

Others - view multimedia proxy values(Browser, MMSC, DSS)

Edit

Data Profile - edit data profile

EVDO - enable/disable DDTM

Advanced - edit Vocoder, Slotted Index, ACCOLC etc

USB Charging - enable/disable USB Charging

eHRPD - enable/disable eHRPD

Others

Browser - edit browser gateway ip/port/secure port

MMSC URL - edit MMS url

DSS - edit DSS server

Multimedia - edit RTSP and HTTPPD proxy settings

RC Data -

HDR/1X Selection - sets data mode... hybrid, cdma only, evdo only etc..

Voice Privacy - enable/disable voice privacy (disabled by default)

DTMF Set - set short/long DTMF

Toggle NAI - enable/disable NAI (enabled by default)

Korea Mode Set - don't mess with this

LTE APN Settings - set LTE APN

Dial Up Networking - enable/disable Dial Up Networking (off by default)

##MSL# Menu
View - view current phone number/msid set.
Edit - write new phone number/msid

##DEBUG# Menu
Various data debug menus. Nothing new here.

##Phone Util# Menu
UART pda/modem settings. This isn't really needed.

##RTN# Menu
Nothing new here. Same as ##786# dialer code. View phone information for perform a full reset on your device. This wipes /data and /internal memory as well as wiping all OTA provision settings.

Dialer Codes

Code:

##CLEAR# - Reset phone's network settings ##DSA# - DSSOption ##GPSCLRX# - Clear GPS Data ##LOG# - SysDump ##RTN# - RTN Menu (View/Reset) ##SCRTN# - Force OTA reprovisioning ##TTY# - TTY Test Mode ##DEBUG# - Debug Menu - 777468 (1x Eng, 1x Eng Protocol, EVDO Eng RF, EVDO Eng Protocol, LTE Eng, Configuration, Bluetooth, Data Status, eHRPD Eng, Others) ##DATA# - Data Menu (View/Edit) *#06# - Display MSL *#22558463# - Total Call Time Reset *#232331# - Bluetooth RF Field Test *#1111# - Read FTA SW Version *#2222# - Read FTA HW Version *#0228# - Battery Status *#7284# - Phone Util

mustangdvx · Oct 31, 2012

Max_Pain said:
anyone know where the settings are for MMS?

I'm trying to figure out how to send MMS on MetroPCS. on the Evo's I used a APN method, but apparently ICS doesn't allow 3rd party apps to write to APN. so I'm trying to enter the values manually. got into the DATA menu, entered a couple of the values, but a few other other values from that APN file are nowhere to be found in the DATA menu...and QPST refuses to see my phone?

any info on this would be great!

To get to the APNs on ICS, use Titanium Backup to make the APN Backup and Restore app a system app, reboot, then in APN Backup and Restore, check the box to bypass ICS check. You should be good to go.

akaKJB · Jan 22, 2013

autoprime said:
Most noteworthy edits include LTE only mode, LTE/CDMA mode(no 3G) and NV BACKUP/RESTORE. Nice little all-in-one shortcut for most of the hidden menus on this device.

If there is another thread on this in the Sprint Galaxy S III forums I apologize. Just going to outline this menu which is found on stock Sprint GS3 Touchwiz roms.

OMG, you have saved my sanity with this post! I've been pretty good at flashing and programming my family's phones and some for friends but most of those have been HTC units. I didn't think twice when I got a killer deal on a couple of 32GB GSIII's but trying to program these for our service has just about had me sticking my head in the oven more than once. One of the issues was that it seemed to depend on the handset's mood as to whether or not it would accept a code input via the keypad. I didn't even think of using a launcher to create a master shortcut like you have here. I'm still not quite there as far as getting these things programmed the way I want them but this post cut my irritation factor in half! Having said that, I'm still seriously considering tossing somebody a few bucks if they'd just do these for me. I love figuring things out and working on things like this as great puzzles but the hours I've put into these so far have kept me from getting actual work done. Are Samsungs always 50% hellspawns to work with?

Anyway, thanks again and thanks to everyone else who has posted great info on these phones. Part of me really wants to get a GalaxyNote II but another part of me is threatening suicide if I even think about wanting to program one!

en11gma · Jan 22, 2013

Sprint GS3 CDMA. (SPH-L710) running android 4.1.1 and it is rooted and has CWM installed.

better cut 3.3 can not make a shortcut to the UI screens as only apps and widgets go there now since we are ICS and JB

what app to use?
or can i access the hiddenmenu another way?

i guess we sprint users dont need the shortcut as that menu for "USB Settings" is already there

##3424# lets me see that menu and i can easily select MTP, ADB and DB and all the rest.

so this isnt a problem anymore
thanks

IOTHiddenMenu (USB Settings, LTE Settings, Test Mode, Dialer codes, etc)

Recognized Dev / Inactive Recognized Contributor

Senior Member

Senior Member

Senior Member

Attachments

Senior Member

Recognized Dev / Inactive Recognized Contributor

Senior Member

Senior Member

Recognized Dev / Inactive Recognized Contributor

Senior Member

Senior Member

Senior Member

Senior Member

Recognized Dev / Inactive Recognized Contributor

Senior Member

Recognized Dev / Inactive Recognized Contributor

Senior Member

Member

Member

Senior Member

Similar threads

Top Liked Posts