WP8 Diagnostics and Hidden Apps Thread

Search This thread

thals1992

Senior Member
Sep 26, 2012
680
238
Cincinnati, OH
www.uidnation.com
Just went through documentation...

Dial string overrides when roaming

Example Code Given:
Code:
<?xml version="1.0" encoding="utf-8"?>
<Package xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema"
  Owner=""
  Component=""
  SubComponent=""
  OwnerType="OEM"
  ReleaseType="">
   <Components>
          <SettingsGroup Path="Phone/PerSimSettings/~__IMSI~/RoamingNumberOverrides">
             <Setting Name="DialString/~DialString~" Description="Specify dial strings to override when the user is roaming.">
                <RegistrySource Type="REG_SZ" Path="HKEY_LOCAL_MACHINE\Software\Microsoft\Phone\PerSimSettings\~__IMSI~\RoamingNumberOverrides\~DialString~" />
                <AccessType Create="Yes" Delete="No" Get="No" Replace="Yes" />
             </Setting>
          </SettingsGroup>
   </Components>
</Package>
Dialer codes for supplementary services

Example Code Given:
Code:
<<?xml version="1.0" encoding="utf-8" ?>  
<ImageCustomizations xmlns="http://schemas.microsoft.com/embedded/2004/10/ImageUpdate"  
                     Name="SupplementaryServicesDialerCodes"  
                     Description="Use to define new mappings or disable the default mappings for dialer codes."  
                     Owner=""  
                     OwnerType="OEM"> 

  <Static>

    <Settings Path="Phone/SupplementaryServiceCodeOverrides"> 
      <-- Select the dialer codes to disable or redefine from the set below 
      <Setting Name="002" Value="" />    
      <Setting Name="004" Value="" />
      <Setting Name="03" Value="" />
      <Setting Name="04" Value="" />
      <Setting Name="042" Value="" />
      <Setting Name="052" Value="" />
      <Setting Name="070" Value="" />
      <Setting Name="071" Value="" />
      <Setting Name="072" Value="" />
      <Setting Name="073" Value="" />    
      <Setting Name="074" Value="" />
      <Setting Name="075" Value="" />
      <Setting Name="076" Value="" />
      <Setting Name="077" Value="" />
      <Setting Name="078" Value="" />
      <Setting Name="079" Value="" />
      <Setting Name="21" Value="" />
      <Setting Name="30" Value="" />
      <Setting Name="300" Value="" />    
      <Setting Name="31" Value="" />
      <Setting Name="33" Value="" />
      <Setting Name="330" Value="" />
      <Setting Name="331" Value="" />
      <Setting Name="332" Value="" />
      <Setting Name="333" Value="" />
      <Setting Name="35" Value="" />
      <Setting Name="351" Value="" />
      <Setting Name="353" Value="" />
      <Setting Name="354" Value="" />
      <Setting Name="360" Value="" />
      <Setting Name="361" Value="" />
      <Setting Name="362" Value="" />
      <Setting Name="363" Value="" />
      <Setting Name="37" Value="" />    
      <Setting Name="43" Value="" />
      <Setting Name="591" Value="" />
      <Setting Name="592" Value="" />
      <Setting Name="593" Value="" />
      <Setting Name="594" Value="" />
      <Setting Name="61" Value="" />
      <Setting Name="62" Value="" />
      <Setting Name="66" Value="" />
      <Setting Name="67" Value="" />
      <Setting Name="75" Value="" />
      <Setting Name="750" Value="" />
      <Setting Name="751" Value="" />
      <Setting Name="752" Value="" />
      <Setting Name="753" Value="" />
      <Setting Name="754" Value="" />    
      <Setting Name="76" Value="" />
      <Setting Name="77" Value="" />
      <Setting Name="96" Value="" />
      -->
    </Settings>  

  </Static>

</ImageCustomizations>
Dialer codes to launch diagnostic applications
Apparently these are somehow deprecated as it requires an Windows Phone 8.0 Silverlight app.

HTML:
Predefined dialer codes                                The following table describes the predefined  application dialer codes available. The <Call> in the dialer code  sequences represents a press of the Call button on the phone.
                                                                                                                          Dialer code
                                                                       Numeric equivalent
                                                                       Description
                                                                                                                 ##DATA#
                                                                       ##3282#
                                                                       Displays the network information.
                                                                                                                 ##MFG#
                                                                       ##634#
                                                                       Calls the manufacturing test tool, if one has been implemented.
                                                                                                                 ##RTN# or ##RTN@
                                                                       ##786# or ##786<Call>
                                                                       "Return To New"—removes all user-specific information from NVRAM and deactivates the phone.
                                                                                                                 ##MSL#
                                                                       ##675#
                                                                       Subsidy lock.
                                                                                                                 ##PST# or ##PST@
                                                                       ##778# or ##778<Call>
                                                                       Product Support Tool—Displays the product support menu to select tasks such as deactivation.
 
Last edited:
  • Like
Reactions: pdaimatejam

-W_O_L_F-

Senior Member
Jul 10, 2010
1,030
941
Moscow
Full set of Diagnosis codes

I improved my hack tool and decrypted ALL Diagnosis codes!

Sorry, it's for WP7

Codes with type "none" don't work!
Here is a full set of 'em:
Code:
Name                       Hash         Type     Code        
====                       ====         ====     ====        
AccelerometerSensor        3242868430   none     *#22235#    
PhoneStatusMsg             641580586    none     *#07032*9608
DEBUGDUMP                  4141485698   Always   *#9900#     
RILDUMP                    1687228688   Always   *#745#      
BATTERYMONITOR             4141486820   none     *#9911#     
VERIFYCOMPARE              4141495499   Always   *#9990#     
VersionScript              3525297214   none     *#99732#    
CAMERAUPDATE               4133012189   Always   *#2470#     
CAMERAUPDATESVC            3282117211   none     *#32589#    
LIGHTSENSORTEST            4130677670   none     *#0589#     
SWversionFTA               4131711956   Always   *#1111#     
HWversionFTA               4132934936   Always   *#2222#     
SWversionEx                4131750170   Always   *#1234#     
SWversionNewIn             4250458108   Always   *#9562678** 
SWversionNewIn_COMMON      3579507701   none     *#16199112* 
RESET_FACTORY              2002483970   Always   *#951001849 
ERASE_IMEIITEM             2002484003   none     *#951001859 
IMEI_NUMBER                51120566     Always   *#4337503*6 
BATT_TEST                  51122348     Always   *#1085718*52
GPS_TEST                   1814073437   none     *#771280*67 
TESTMODE                   2315889864   Always   *#197328640#
DEBUGMODE1                 4130490098   Always   *#0011#     
BATTERYINFO                4130563292   Always   *#0228#     
CIPHERING                  3282081274   none     *#32489#    
INTEGRITY                  4133049215   none     *#2580#     
DEVICETEST                 4130780894   Always   *#0842#     
RTC                        4130749313   none     *#0782#     
AUDIOTEST                  4130712320   none     *#0673#     
AUDIOTEST2                 4130569859   none     *#0289#     
SOUNDTEST                  4130712386   none     *#0675#     
ILLUMINATIONTEST           4130780927   none     *#0843#     
LAUNCH_UAEDIT              3517001212   none     *#92782#    
UARTCHANGER                4141172066   none     *#9090#     
RRCVERSION                 4130678759   none     *#0599#     
GPSTEST                    4131862370   none     *#1575#     
BANDSELECTION              4132939325   none     *#2263#     
GCFTESTMODE_ENTER          403159779    none     *#4238378#  
PHONELOOPBACKTEST          4130569661   Always   *#0283#     
ReactivateSellOutSMS       2155722335   none     *#509733**# 
DisableSellOutSMS          2419357615   none     *#999001**2 
SellOutSMSTestMode         2531766893   none     *#1172194106
SellOutSMSProductionMode   2530723466   none     *#561277575 
SellOutSMS                 3494684894   none     *#1784229*6 
USBPATHCHANGE              4138871141   Always   *#7284#     
POWERONATTACH              4138872362   none     *#7298#     
BLUETOOTH_MAC_VIEWER       3974576996   Always   *#232337#   
BLUETOOTH_RF_TEST          3974576798   Always   *#232331#   
BLUETOOTH_AUDIO_TEST       3974576831   none     *#232332#   
BLUETOOTH_SEARCH_TEST      3974576864   none     *#232333#   
WIFI_MAC_VIEWER            3974577029   Always   *#232338#   
WIFI_TEST                  3974577062   none     *#232339#   
WIFI_FACTORY_TEST          1687154669   none     *#526#      
AUDIOCODEC                 2418895042   none     *#0348638498
AUDIOGAINCONTROL           2418895075   none     *#11240*2684
FMRADIORX                  4130603585   none     *#0368#     
FMRADIORX_COMMON           4134271370   none     *#3689#     
AutoReceive_Enable         4012662285   none     *#4505**554 
AutoReceive_Disable        3568836989   none     *#063497*42#
LOCK_STATUS_INFO           2106356451   none     *#7465625#  
EN_LOCK_NW                 3153231157   none     *#303176*91 
DIS_LOCK_NW                489744846    none     *#118*229466
EN_LOCK_SUB_NW             3154590229   none     *#13061*685 
DIS_LOCK_SUB_NW            491103918    none     *#44860*9125
EN_LOCK_SVC                4130258530   none     *#362077129 
DIS_LOCK_SVC               3398794203   none     *#446255022 
EN_LOCK_CORP               4130078845   none     *#362072129 
DIS_LOCK_CORP              3398614518   none     *#446250022 
SMDINFO                    51120467     none     *#003*07080*
LCDTEST                    51120170     Always   *#1496283*02
SIMPLE_FUNCTION_TEST       51120533     none     *#003*07082*
SELF_DIAGNOSTIC_MODE       4138903778   none     *#7353#     
VPHONE_ENABLED             4139035481   Always   *#087260230 
VPHONE_DISABLED            4139035448   Always   *#087260220 
VPHONE770                  1687231790   Always   *#770#      
VPHONE771                  1687231823   Always   *#771#      
VPHONE772                  1687231856   Always   *#772#      
VPHONE773                  1687231889   Always   *#773#      
VPHONE774                  1687231922   Always   *#774#      
VPHONE775                  1687231955   Always   *#775#      
VPHONE776                  1687231988   Always   *#776#      
VPHONE777                  1687232021   Always   *#777#      
VPHONE778                  1687232054   Always   *#778#      
VPHONE779                  1687232087   Always   *#779#      
ERROR_REPORT_ON            4138939649   Always   *#7451#     
SLOGSERIAL_ALL_OFF         1884348474   none     *#745*00#   
SLOGSERIAL_M1              1884348507   none     *#745*01#   
SLOGSERIAL_M2              1884348540   none     *#745*02#   
SLOGSERIAL_M3              1884348573   none     *#745*03#   
SLOGSERIAL_M4              1884348606   none     *#745*04#   
SLOGSERIAL_M5              1884348639   none     *#745*05#   
SLOGSERIAL_M6              1884348672   none     *#745*06#   
SLOGSERIAL_ALL_ON          1884358572   none     *#745*99#   
RILNETLOG_ON               4137721058   Always   *#6381#     
RILNETLOG_OFF              4137721025   Always   *#6380#     
SR_ENABLED                 3445579114   none     *#780*1#    
SR_DISABLED                3445579081   none     *#780*0#    
SR_TEST                    1687232879   none     *#780#      
BLUETOOTH_LOG_ENABLE       362345471    none     *#9902*1#   
BLUETOOTH_LOG_DISABLE      362345438    none     *#9902*0#   
DEBUG_RIL_DUMP             4141485896   none     *#9906#     
GUMITEST3G_CAB_INSTALL     4141485962   Always   *#9908#     
SUWON3G_CAB_INSTALL        4141485995   none     *#9909#     
TOTALCALLTIME              3277063155   Always   *#22558463# 
BRIGHTNESS_TEST            51123437     none     *#1044661037
CONNECTION_SETTING         4141487876   Always   *#9920#     
VIEWHISTORYNW              51120599     Always   *#003*07084*
APPSLAUNCHER               54201206     none     *#914789#   
FTAMain                    1670         Always   *#1241402731
TouchFirmare_2663          4133083073   Always   *#2663#     
TouchDelta_80              51129080     none     *#1044661597
PVKKey                     3525302758   Always   *#99785#    
PVKFileName                370874684    Always   *#997856#   
BT_SSPDEbugModeEnable      362345504    none     *#9902*2#   
BT_SSPDEbugModeDisable     362345537    none     *#9902*3#   
BT_DebugLogEnable          362345570    none     *#9902*4#   
AutoSimSetting             3519370975   none     *#94765#    
MultiTouch                 4130821352   none     *#0987#     
TFlashUnPairing            1371050692   none     *#99867247# 
SerialNumber               1847946636   none     *#737425#   
DebugOption                4138939616   none     *#7450#     
Rebooting                  1687085864   none     *#350#      
LcdTimeoutON               1687049927   none     *#250#      
LcdTimeoutOFF              1687049960   none     *#251#      
PowerOffSetting            4138980041   none     *#7594#     
TouchkeySensitivity        3482638972   Always   *#86824#    
PROXEN_HIGH                2504635585   none     *#035560752#
PROXEN_LOW                 2504635552   none     *#035560751#
MPS                        4130527190   Always   *#0123#     
I2CTMN                     1687266836   none     *#866#      
IPSetting                  3974577854   Always   *#232340#


---------- Post added at 07:42 PM ---------- Previous post was at 07:15 PM ----------

Same thing for WP8:
Code:
Name                       Hash         Type               Code        
====                       ====         ====               ====        
Rebooting                  1687085864   BlockType.None     *#350#      
MultiTouch                 4130821352   BlockType.None     *#0987#     
SWversionEx                4131750170   BlockType.Always   *#1234#     
SWversionNewIn             4250458108   BlockType.Always   *#9562678** 
SWversionNewIn_COMMON      3579507701   BlockType.Always   *#16199112* 
buildInfo                  3525297214   BlockType.Always   *#99732#    
ProductionError            1842166158   BlockType.Always   *#732873#   
LcdTimeoutON               1687049927   BlockType.None     *#250#      
LcdTimeoutOFF              1687049960   BlockType.None     *#251#      
SMDINFO                    51120467     BlockType.None     *#003*07080*
PVKKey                     3525302758   BlockType.Always   *#99785#    
PVKFileName                370874684    BlockType.Always   *#997856#   
SerialNumber               1847946636   BlockType.None     *#737425#   
DebugOption                4138939616   BlockType.None     *#7450#     
ScreenCapture              672812247    BlockType.None     *#666777#   
CHNLPR                     4018532303   BlockType.None     *#246577#   
CSCConverter               1151388288   BlockType.Always   *#071712331*
CSCConverter_inner         3245274955   BlockType.Always   *#24320#    
CSCConverter_common        99999999     BlockType.Always   *#321647335 
unlockdevice               440122119    BlockType.None     *#608090#   
CPUChipInfo                3419028964   BlockType.Always   *#2784636#  
TotalCalltime              3277063155   BlockType.Always   *#22558463# 
FTAMain                    1670         BlockType.Always   *#1241402731
VIEWHISTORYNW              4138974695   BlockType.Always   *#7547#     
SIMPLE_FUNCTION_TEST       51120533     BlockType.None     *#003*07082*
SELF_DIAGNOSTIC_MODE       4138903778   BlockType.None     *#7353#     
BRIGHTNESS_TEST            51123437     BlockType.None     *#1044661037
SOUNDTEST                  4130712386   BlockType.None     *#0675#     
AccelerometerSensor        3242868430   BlockType.None     *#22235#    
BATTERYMONITOR             4141486820   BlockType.None     *#9911#     
CAMERAUPDATE               1214855129   BlockType.Always   *#34971539# 
CAMERAUPDATESVC            1907018268   BlockType.Always   *#7412365#  
LIGHTSENSORTEST            4130677670   BlockType.None     *#0589#     
BATT_TEST                  51122348     BlockType.Always   *#1085718*52
GPS_TEST                   1814073437   BlockType.None     *#771280*67 
BATTERYINFO                4130563292   BlockType.Always   *#0228#     
DEVICETEST                 4130780894   BlockType.Always   *#0842#     
RTC                        4130749313   BlockType.None     *#0782#     
AUDIOTEST                  4130712320   BlockType.None     *#0673#     
AUDIOTEST2                 4130569859   BlockType.None     *#0289#     
ILLUMINATIONTEST           4130780927   BlockType.None     *#0843#     
PHONELOOPBACKTEST          4130569661   BlockType.Always   *#0283#     
USBPATHCHANGE              4138871141   BlockType.Always   *#7284#     
BLUETOOTH_MAC_VIEWER       3974576996   BlockType.Always   *#232337#   
BLUETOOTH_RF_TEST          3974576798   BlockType.Always   *#232331#   
BLUETOOTH_AUDIO_TEST       3974576831   BlockType.None     *#232332#   
BLUETOOTH_SEARCH_TEST      3974576864   BlockType.None     *#232333#   
WIFI_MAC_VIEWER            3974577029   BlockType.Always   *#232338#   
WIFI_TEST                  3974577062   BlockType.None     *#232339#   
WIFI_FACTORY_TEST          1687154669   BlockType.None     *#526#      
NFC                        993032389    BlockType.Always   *#6328378#  
AUDIOCODEC                 2418895042   BlockType.None     *#0348638498
AUDIOGAINCONTROL           2418895075   BlockType.None     *#11240*2684
FMRADIORX                  4130603585   BlockType.None     *#0368#     
FMRADIORX_COMMON           4134271370   BlockType.None     *#3689#     
MICROUSB_TEST              4131936356   BlockType.None     *#1793#     
LCDTEST                    51120170     BlockType.Always   *#1496283*02
TouchFirmare_2663          4133083073   BlockType.Always   *#2663#     
TouchDelta_80              51129080     BlockType.None     *#1044661597
BT_LogDisable              362345438    BlockType.None     *#9902*0#   
BT_LogEnable               362345471    BlockType.None     *#9902*1#   
BT_SSPDEbugModeEnable      362345504    BlockType.None     *#9902*2#   
BT_SSPDEbugModeDisable     362345537    BlockType.None     *#9902*3#   
PowerOffSetting            4138980041   BlockType.None     *#7594#     
TouchkeySensitivity        3482638972   BlockType.Always   *#86824#    
ProximityTest              4139048813   BlockType.Always   *#7769#     
LCDDimmingTestLoop         68478722     BlockType.None     *#5235667#  
CompassLog                 513825771    BlockType.None     *#624564#   
EnableNever                3400811611   BlockType.None     *#63837#    
TouchSpecVerifier          4189735160   BlockType.None     *#1621449376
APPSLAUNCHER               54201206     BlockType.None     *#914789#   
NetworkSettingInfo         4141487876   BlockType.Always   *#9920#     
ConnProflieSetting         4141485962   BlockType.Always   *#9908#     
RUNAPP                     2042365872   BlockType.None     *#786227#   
IPSetting                  3974577854   BlockType.Always   *#232340#   
CDMATEST                   1695532268   BlockType.None     *#455037698 
CDMATEST                   1695534446   BlockType.None     *#455037898 
DMGCF                      3207361684   BlockType.None     *#15428#    
DataScreen                 2764154383   BlockType.None     *#44267458*0
CDMA_LTE_NETTYPE           51377652     BlockType.None     *#45503589  
TESTMODE                   2315889864   BlockType.None     *#197328640#
SWversionFTA               4141495796   BlockType.Always   *#9999#     
HWversionFTA               4140272816   BlockType.Always   *#8888#     
SWversionFTA               4131711956   BlockType.Always   *#1111#     
HWversionFTA               4132934936   BlockType.Always   *#2222#     
DEBUGMODE1                 4130490098   BlockType.Always   *#0011#     
CIPHERING                  3282081274   BlockType.None     *#32489#    
INTEGRITY                  4133049215   BlockType.None     *#2580#     
UARTCHANGER                4141172066   BlockType.None     *#9090#     
RRCVERSION                 4130678759   BlockType.None     *#0599#     
GPSTEST                    4131862370   BlockType.None     *#1575#     
BANDSELECTION              4132939325   BlockType.None     *#2263#     
GCFTESTMODE_ENTER          403159779    BlockType.None     *#4238378#  
ReactivateSellOutSMS       2155722335   BlockType.None     *#509733**# 
DisableSellOutSMS          2419357615   BlockType.None     *#999001**2 
SellOutSMSTestMode         2531766893   BlockType.None     *#1172194106
SellOutSMSProductionMode   2530723466   BlockType.None     *#561277575 
SellOutSMS                 3494684894   BlockType.None     *#1784229*6 
POWERONATTACH              4138872362   BlockType.None     *#7298#     
OperatorDebug              1067070358   BlockType.None     *#37375625# 
AutoReceive_Enable         4012662285   BlockType.None     *#4505**554 
AutoReceive_Disable        3568836989   BlockType.None     *#063497*42#
CollectLog                 3525042124   BlockType.None     *#9900*#    
RetailLog                  4141485698   BlockType.Always   *#9900#     
DEBUGDUMP                  4130669882   BlockType.None     *#0514#     
RILDUMP                    1687228688   BlockType.Always   *#745#      
LOCK_STATUS_INFO           2106356451   BlockType.None     *#7465625#  
EN_LOCK_NW                 3153231157   BlockType.None     *#303176*91 
DIS_LOCK_NW                489744846    BlockType.None     *#118*229466
EN_LOCK_SUB_NW             3154590229   BlockType.None     *#13061*685 
DIS_LOCK_SUB_NW            491103918    BlockType.None     *#44860*9125
EN_LOCK_SVC                4130258530   BlockType.None     *#362077129 
DIS_LOCK_SVC               3398794203   BlockType.None     *#446255022 
EN_LOCK_CORP               4130078845   BlockType.None     *#362072129 
DIS_LOCK_CORP              3398614518   BlockType.None     *#446250022 
VERIFYCOMPARE              4141495499   BlockType.Always   *#9990#     
IMEI_NUMBER                51120566     BlockType.Always   *#4337503*6 
RESET_FACTORY              2002483970   BlockType.None     *#951001849 
HIDDEN_TEST                1468447360   BlockType.None     *#1972735*7 
HIDDEN_TEST_RTNMenu        1413285326   BlockType.None     *#01541866*8
DNS_DISABLE                3737272694   BlockType.None     *#3736241843
HIDDEN_TEST                2722728366   BlockType.None     *#0186*38850
HIDDEN_TEST                4134127391   BlockType.None     *#3282#     
HIDDEN_TEST                651520162    BlockType.None     *#3214789#  
HIDDEN_TEST                3682702876   BlockType.None     *#096786773*
HIDDEN_TEST                113137464    BlockType.None     *#7597308** 
HIDDEN_TEST                3683786200   BlockType.None     *#043*313*09
HIDDEN_TEST                324852231    BlockType.None     *#0788668834
HIDDEN_TEST                3109716334   BlockType.None     *#2274840*66
HIDDEN_TEST                119210817    BlockType.None     *#7597848** 
HIDDEN_TEST                1270103692   BlockType.None     *#26157*5056
HIDDEN_TEST                1413321362   BlockType.None     *#3884140225
Rebooting                  1462373143   BlockType.None     *#1717795104
SAR                        51120599     BlockType.Always   *#003*07084*
 
Last edited:

Luxon

Senior Member
Feb 19, 2011
107
4
St. Petersburg
Guys, how do you get total battery charge cycles on Samsung ATIV S? I remember seeing this info, but it doesn't come now how I've achieved to get this info.

*#0228# in Samsung Diag App doesn't reveal charge cycle data.

Just got me a new battery, but the seal was broken. Chances are, the battery was used... Wanna check this.

My original battery had 600+ cycles a year and a half ago.
 

EspHack2

Senior Member
Aug 8, 2016
124
16
Try to write in HKLM\MICROSOFT\PHONE\SETTINGS\PartnerImmediateDialString this code ##3282# . Then restart the phone.
did that on my 928 and field test now opens, interestingly the available bands on LTE are nothing like they advertised for international support, there's not even band 3 which is the only band known to be activated on that phone for verizon, band 4 is there but the rest are all different from what gsmarena and other sites say

the field test app is kind of different though, on 640 I remember having a list of frequencies I could freely enable-disable, here's just a list of selectable bands OR auto mode
 

Top Liked Posts

  • There are no posts matching your filters.
  • 9
    I had just unboxed a Nokia Lumia 928 and didn't see anything about dialer codes for WP8 and it seemed that it had similar diagnostic functions leftover from the WP7 line. So, I though I'd start with mine and see if others would report what works on theirs too!

    NOTE: I never reserved a second post, so it gets crammed all in one giant box. Sorry Tapatalk phone users!

    Dial Codes' Location in the OEM ROMs
    EFIESP\Windows\Logs\OemCustomizationTool.xml
    \Windows\Logs\OemCustomizationTool.xml
    \Windows\Packages\RegistryFiles\Microsoft.Comms.reg
    \Windows\Packages\RegistryFiles\OEMSettings.reg

    This came from RM860_1532.5957.1318.3021_RETAIL_nam_usa_100_21_185971_prd_signed.mnt.ffu
    Code:
    \Windows\Logs\OemCustomizationTool.xml
    <Component ComponentName="Partner App Support">
      <SettingsGroup>
        <Setting Name="Partner Immediate Dial Strings" Value="##634#;##778#;##4678255#;*#07#;##07#"/>
        <Setting Name="Partner NonImmediate Dial Strings" Value="##778"/>
      </SettingsGroup>
    </Component>
    All Windows Phones
    *#06# - Shows Carrier of SIM and the device IMEI.
    Nokia Devices
    Complete List of Lumia Dial Codes
    This is a quick find list of Codes that work. The devices that are in the parenthesis are verified to work on the said devices.

    ##634# - Color Variant + Call Life Time Counter (L920, L928)
    ##4678255# - Tier3 Status (L920, L928)
    *#07# or ##07# - Launch main page of extras+info
    ##778# - Product Support Tool
    ##3282# or ##3282w/call - Field Test (L521, L820, L920, L925)
    ##777# or ##777w/call - User Content Reset(tested on 1520 w/059V276 PROD code)
    ##7820# or ##7820w/call - SIM Lock Status

    Nokia Lumia 525 (RM-998_apac_malaysia_935)

    Works from the dialer:
    ##634# - Shows color variant and lifetime counter.
    ##07# - Opens extras+info and gives a page that says "Lumia Black" and lists the model and type followed by some logos of standards.
    ##4678255# - Shows Tier3 status, which I honestly can't make heads or tails out of beyond a list of apps and guids.

    Needs native toast launcher:
    ##778# - Opens service tools, but nothing seems to be doable there. It says "select function set" but there's nothing to select.
    ##3282# - Opens field test. Tried locking network to 3G on one of the networks here that have bad reception, and that works perfectly.
    ##7820# - Shows sim lock status. Now this is where it gets weird. This is an unlocked phone bought in Malaysia and currently used in Sri Lanka on a Sri Lankan network (only the SIM card was given by the service provider). It's working perfectly, yet this claims that the phone is sim locked (shows a lock over a SIM card icon) and gives me a text box to enter a key which I don't have nor can ever obtain, since the phone wasn't purchased from a service provider.

    Nokia Lumia 920
    I get the same [results as the Lumia 928] on my AT&T branded 920, except that the ##4678255# doesn't show any installed apps.
    ##3282# does in fact work for the Lumia 521, 820, and 925. These devices have the ability to manually change their network type "2G, 3G, or LTE". Please note there was not a "4G" listed. As for specifically the 920, I've read ##3282 not ##3282# works following some sort of update not too long ago.
    @berrywr Typing ##3282 + taping Call works on L920 unbranded.

    Nokia Lumia 521, 820, and 925
    ##3282# does in fact work.
    These devices have the ability to manually change their network type "2G, 3G, or LTE". Please note there was not a "4G" listed; either via the Field Test Mode or within Settings.
    I can confirm 782 with Native Toast Notification Launcher on the Lumia 820 with the Amber update. First it asks me for a unlock code, but mine has been unlocked by code, so it was not a problem tap code again. After 3-5 times, it shows as unlocked.

    Nokia Lumia 928

    I've found new dial codes in the Rogers ROM [for the Lumia 920] following the GDR1 update. Here they are:
    Note: All of these codes launch a sub section of the "extras+info" application through its GUID (2377fe1b-c10f-47da-92f3-fc517345a3c0)
    NOTE: Most of the dial codes for the Lumia 928 is @cpuguy's work. I merely adjusted it about my device instead.
    Color Variant + Life Time Counter
    Code:
    Code: ##MFG# (##634#)
    Description: Also not new... Displays the multivariant color (my value is null but yours might be displayed) and life timer. It reads that info from the registry ("Software\OEM\Nokia\Multivariant\Color" and "Software\OEM\Nokia\lifetimecounter"). It also displays the modem version now.
    Component: ColorVariant.dll
    View attachment 2027390

    Silent Installer Component - aka Tier 3 (Launches a screen titled Tier3 Status and displays several OEM installed apps)
    Code:
    Code: ##4678255#[/code}
    Description: [The Lumia 920 from another thread] does nothing at this time but the code seems to indicate that it monitors for provxml files. The monitoring is actually done by the SilentInstallerServiceAgent (SilentInstallerServiceAgent.dll). It monitors for registry entries pointing to physical provxml files at "SOFTWARE\OEM\Nokia\SIAgent\Multivariant" and "SOFTWARE\OEM\Nokia\SIAgent\Tier3". It also monitors the physical folder "C:\Programs\CommonFiles\OEM\Public\PreloadedApps\tier3Apps". When new provxml files are detected, it executes them (I haven't seen any indication so far that it'll do anything besides file copy instructions).
    Component: SilentInstallerComponent.dll
    [ATTACH]2174947._xfImport[/ATTACH][ATTACH]2174948._xfImport[/ATTACH][ATTACH]2174949._xfImport[/ATTACH]
     
    extras+info (launches the same page from settings)
    [code]Code: *#07# or ##07#
    Description: The code is purposely written to keep all elements on the main page to a "Collapse" visibility (meaning hidden). All the information would be normally displayed when launching the "extras+info" application is in fact populated.
    Component: Regulatory.dll

    Product Support Tool (no actual title)
    Code:
    Code: ##PST#  (##778#)
    (can possibly be launched through an NFC tag if specifying a "DialString" argument with a of value "778" - untested)
    Description: Has the same function on various WP7 devices; allows access to cell network settings. Uses a pass code of 000000. No fields are editable.
    Component: ProductSupportTool.dll
    View attachment 2027391View attachment 2027392View attachment 2027393View attachment 2027396View attachment 2027397

    Various Nokia Lumia Devices - (Developer/Pre-production units only)
    Some of the Lumias have a manually installed OEM app, On-Device Diagnostics Tool.
    The following URL has multiple devices that has the app installed. To use the service you need a Nokia account, then it will prompt you to create a Nokia developer account. [NOTE: Its recommended you attach your developer id from your MS Dev account as part of the process for later use.]
    http://developer.nokia.com/Devices/Remote_device_access/

    EDIT 2: There isn't much info about on the ODDT from Nokia. I've uploaded and embedded the videos demonstrating the oem diagnostic tool and some other stuff I did in the session.



    Samsung Devices

    Samsung ATIV S
    ##MFG# (##634#) on my Samsung ATIV S SGH-T899M installs the "Diagnosis" app, which has a number of interesting powers.
    ##3282# [in the native dialer] gives many alternatives to edit/read on my GT-I8750 :D
    @leffep: Whoa, nice find! Lots of options there on my SGH-T899M as well (different model ATIV S).
    All Diagnosis Codes
    I've decompiled Diagnosis and decrypted its codes.

    Only type Always codes work.
    Code:
    Name                       Hash         Type               Code       
    ====                       ====         ====               ====       
    Rebooting                  1687085864   BlockType.None     *#350#     
    MultiTouch                 4130821352   BlockType.None     *#0987#    
    SWversionEx                4131750170   BlockType.Always   *#1234#    
    SWversionNewIn             4250458108   BlockType.Always   *#9562678**
    SWversionNewIn_COMMON      3579507701   BlockType.Always   *#16199112*
    buildInfo                  3525297214   BlockType.Always   *#99732#   
    ProductionError            1842166158   BlockType.Always   *#732873#  
    LcdTimeoutON               1687049927   BlockType.None     *#250#     
    LcdTimeoutOFF              1687049960   BlockType.None     *#251#     
    SMDINFO                    51120467     BlockType.None     *#03#      
    PVKKey                     3525302758   BlockType.Always   *#99785#   
    PVKFileName                370874684    BlockType.Always   *#997856#  
    SerialNumber               1847946636   BlockType.None     *#737425#  
    DebugOption                4138939616   BlockType.None     *#7450#    
    ScreenCapture              672812247    BlockType.None     *#666777#  
    CHNLPR                     4018532303   BlockType.None     *#246577#  
    CSCConverter               1151388288   BlockType.Always   *#78*598031
    CSCConverter_inner         3245274955   BlockType.Always   *#24320#   
    CSCConverter_common        99999999     BlockType.Always   *#321647335
    unlockdevice               440122119    BlockType.None     *#608090#  
    CPUChipInfo                3419028964   BlockType.Always   *#2784636# 
    TotalCalltime              3277063155   BlockType.Always   *#22558463#
    FTAMain                    1670         BlockType.Always              
    VIEWHISTORYNW              4138974695   BlockType.Always   *#7547#    
    SIMPLE_FUNCTION_TEST       51120533     BlockType.None     *#05#      
    SELF_DIAGNOSTIC_MODE       4138903778   BlockType.None     *#7353#    
    BRIGHTNESS_TEST            51123437     BlockType.None     *#3*#      
    SOUNDTEST                  4130712386   BlockType.None     *#0675#    
    AccelerometerSensor        3242868430   BlockType.None     *#22235#   
    BATTERYMONITOR             4141486820   BlockType.None     *#9911#    
    CAMERAUPDATE               1214855129   BlockType.Always   *#34971539#
    CAMERAUPDATESVC            1907018268   BlockType.Always   *#7412365# 
    LIGHTSENSORTEST            4130677670   BlockType.None     *#0589#    
    BATT_TEST                  51122348     BlockType.Always   *#2*#      
    GPS_TEST                   1814073437   BlockType.None     *#771280*67
    BATTERYINFO                4130563292   BlockType.Always   *#0228#    
    DEVICETEST                 4130780894   BlockType.Always   *#0842#    
    RTC                        4130749313   BlockType.None     *#0782#    
    AUDIOTEST                  4130712320   BlockType.None     *#0673#    
    AUDIOTEST2                 4130569859   BlockType.None     *#0289#    
    ILLUMINATIONTEST           4130780927   BlockType.None     *#0843#    
    PHONELOOPBACKTEST          4130569661   BlockType.Always   *#0283#    
    USBPATHCHANGE              4138871141   BlockType.Always   *#7284#    
    BLUETOOTH_MAC_VIEWER       3974576996   BlockType.Always   *#232337#  
    BLUETOOTH_RF_TEST          3974576798   BlockType.Always   *#232331#  
    BLUETOOTH_AUDIO_TEST       3974576831   BlockType.None     *#232332#  
    BLUETOOTH_SEARCH_TEST      3974576864   BlockType.None     *#232333#  
    WIFI_MAC_VIEWER            3974577029   BlockType.Always   *#232338#  
    WIFI_TEST                  3974577062   BlockType.None     *#232339#  
    WIFI_FACTORY_TEST          1687154669   BlockType.None     *#526#     
    NFC                        993032389    BlockType.Always   *#6328378# 
    AUDIOCODEC                 2418895042   BlockType.None                
    AUDIOGAINCONTROL           2418895075   BlockType.None                
    FMRADIORX                  4130603585   BlockType.None     *#0368#    
    FMRADIORX_COMMON           4134271370   BlockType.None     *#3689#    
    MICROUSB_TEST              4131936356   BlockType.None     *#1793#    
    LCDTEST                    51120170     BlockType.Always   *#0*#      
    TouchFirmare_2663          4133083073   BlockType.Always   *#2663#    
    TouchDelta_80              51129080     BlockType.None     *#80#      
    BT_LogDisable              362345438    BlockType.None     *#9902*0#  
    BT_LogEnable               362345471    BlockType.None     *#9902*1#  
    BT_SSPDEbugModeEnable      362345504    BlockType.None     *#9902*2#  
    BT_SSPDEbugModeDisable     362345537    BlockType.None     *#9902*3#  
    PowerOffSetting            4138980041   BlockType.None     *#7594#    
    TouchkeySensitivity        3482638972   BlockType.Always   *#86824#   
    ProximityTest              4139048813   BlockType.Always   *#7769#    
    LCDDimmingTestLoop         68478722     BlockType.None     *#5235667# 
    CompassLog                 513825771    BlockType.None     *#624564#  
    EnableNever                3400811611   BlockType.None     *#63837#   
    TouchSpecVerifier          4189735160   BlockType.None                
    APPSLAUNCHER               54201206     BlockType.None     *#914789#  
    NetworkSettingInfo         4141487876   BlockType.Always   *#9920#    
    ConnProflieSetting         4141485962   BlockType.Always   *#9908#    
    RUNAPP                     2042365872   BlockType.None     *#786227#  
    IPSetting                  3974577854   BlockType.Always   *#232340#  
    CDMATEST                   1695532268   BlockType.None     *#455037698
    CDMATEST                   1695534446   BlockType.None     *#455037898
    DMGCF                      3207361684   BlockType.None     *#15428#   
    DataScreen                 2764154383   BlockType.None                
    CDMA_LTE_NETTYPE           51377652     BlockType.None     *#45503589 
    TESTMODE                   2315889864   BlockType.None                
    SWversionFTA               4141495796   BlockType.Always   *#9999#    
    HWversionFTA               4140272816   BlockType.Always   *#8888#    
    SWversionFTA               4131711956   BlockType.Always   *#1111#    
    HWversionFTA               4132934936   BlockType.Always   *#2222#    
    DEBUGMODE1                 4130490098   BlockType.Always   *#0011#    
    CIPHERING                  3282081274   BlockType.None     *#32489#   
    INTEGRITY                  4133049215   BlockType.None     *#2580#    
    UARTCHANGER                4141172066   BlockType.None     *#9090#    
    RRCVERSION                 4130678759   BlockType.None     *#0599#    
    GPSTEST                    4131862370   BlockType.None     *#1575#    
    BANDSELECTION              4132939325   BlockType.None     *#2263#    
    GCFTESTMODE_ENTER          403159779    BlockType.None     *#4238378# 
    ReactivateSellOutSMS       2155722335   BlockType.None     *#509733**#
    DisableSellOutSMS          2419357615   BlockType.None     *#999001**2
    SellOutSMSTestMode         2531766893   BlockType.None                
    SellOutSMSProductionMode   2530723466   BlockType.None     *#561277575
    SellOutSMS                 3494684894   BlockType.None     *#1784229*6
    POWERONATTACH              4138872362   BlockType.None     *#7298#    
    OperatorDebug              1067070358   BlockType.None     *#37375625#
    AutoReceive_Enable         4012662285   BlockType.None     *#4505**554
    AutoReceive_Disable        3568836989   BlockType.None                
    CollectLog                 3525042124   BlockType.None     *#9900*#   
    RetailLog                  4141485698   BlockType.Always   *#9900#    
    DEBUGDUMP                  4130669882   BlockType.None     *#0514#    
    RILDUMP                    1687228688   BlockType.Always   *#745#     
    LOCK_STATUS_INFO           2106356451   BlockType.None     *#7465625# 
    EN_LOCK_NW                 3153231157   BlockType.None     *#303176*91
    DIS_LOCK_NW                489744846    BlockType.None                
    EN_LOCK_SUB_NW             3154590229   BlockType.None     *#13061*685
    DIS_LOCK_SUB_NW            491103918    BlockType.None                
    EN_LOCK_SVC                4130258530   BlockType.None     *#362077129
    DIS_LOCK_SVC               3398794203   BlockType.None     *#446255022
    EN_LOCK_CORP               4130078845   BlockType.None     *#362072129
    DIS_LOCK_CORP              3398614518   BlockType.None     *#446250022
    VERIFYCOMPARE              4141495499   BlockType.Always   *#9990#    
    IMEI_NUMBER                51120566     BlockType.Always   *#06#      
    RESET_FACTORY              2002483970   BlockType.None     *#951001849
    HIDDEN_TEST                1468447360   BlockType.None     *#2106*41*1
    HIDDEN_TEST_RTNMenu        1413285326   BlockType.None                
    DNS_DISABLE                3737272694   BlockType.None                
    HIDDEN_TEST                2722728366   BlockType.None                
    HIDDEN_TEST                4134127391   BlockType.None     *#3282#    
    HIDDEN_TEST                651520162    BlockType.None     *#3214789# 
    HIDDEN_TEST                3682702876   BlockType.None                
    HIDDEN_TEST                113137464    BlockType.None     *#7597308**
    HIDDEN_TEST                3683786200   BlockType.None     *#70*297080
    HIDDEN_TEST                324852231    BlockType.None                
    HIDDEN_TEST                3109716334   BlockType.None                
    HIDDEN_TEST                119210817    BlockType.None     *#7597848**
    HIDDEN_TEST                1270103692   BlockType.None                
    HIDDEN_TEST                1413321362   BlockType.None                
    Rebooting                  1462373143   BlockType.None                
    SAR                        51120599     BlockType.Always   *#07#
    (Where is the Samsung ATIV S specific forum? >_<)
    Here are some codes for ATIV S, these are intended to be inserted in the Diagnostic Dialer
    IMEI Number Prompt: *#06#
    Screen and vibration test menu: *#0*#
    Battery test menu: *#0228#
    Firmware version prompt: *#1234#
    FTA SW Version menu: *#1111#
    FTA HW Version menu: *#2222#
    FTA HW Version menu: *#8888#
    FTA SW Version menu: *#9999#
    Basic information Testmode menu: *#0011#
    Vibrations test menu: *#0842#
    Bluetooth MAC Address prompt: *#232337#
    I don't know what the FTA menus are for, but they look dangerous (and potentially useful).
    Hidden Test Menu
    When you install diagnosis app via ##634# code and you type 3 digits starting with 15 (last digit doesn't matter) you will have access to a hidden test menu... For example we can view the Samsung ROM version (mine is I8750XXAMC1)
    Unfortunately I can't take a screenshot while viewing that menu. I hope someone will make something useful from this info :)
    Extra Hidden Menu
    Launch the diagnostic dialer as usual.
    2nd open up:
    FTA SW Version menu: *#9999#
    3rd: TYPE THE FOLLOWING VERY QUICKLY! If you do this slow, nothing happens!!!
    *#0
    you will see the following menu
    please be careful!!!!
    Micro USB Menu (USB Path Control): *#7284#
    I think it's old, but if you enter a test menu (for example using *#2222#) you can reach the 'root' by pressing the 'back' buttons multiple times and then you can navigate the tree as you like.
    attachment.php
    attachment.php
    on Samsung Micro USB test has 3 Options :

    zune sync
    modem, tethered Call
    modem, usb diag

    USB TETHERING:

    Playing along with the phone, I've noticed that typing ##778# into the phone's dialer also launches the Diagnosis menu(Odyssey_121205). Don't know if it's old news but I wanted to spread the info. My phone is an ATIV S - I8750, unbranded. I'm currently on Orange Romania network but the phone works on any networks. My current CSC is ATO. I left it this way because there is no CSC for Romania in the menu(not even the OXX type). Running the last GDR3 update.
    HTC Devices
    HTC 8X
    When I enter any of those commands, I get the HTC Function Test v1.01.01g (flashlight, LED & vibrator test).
    After running the commands, theres an update for the CSDDiag tool (from HTC v1.1.23311.13243) which is now visible in the apps list. It contains a full of diag tools:
    Backlight, Vibrator, LED, Button, Linedraw, Flashlight, Charger, gsensor, Audio, Mic, Headset, Camera, Bluetooth, WiFi, Battery, GPS, LiveCall (receiver,psensor), LightSensor, and NFC test menus.
    Also contains device info, and factory reset.

    On the HTC 8x, you can launch a "hidden" APN settings page using the following URI [using cpuguy's Native Toast Notification Launcher] : app://5edbdbbc-2ab2-df11-8a2f-00237de2db9e/_default#/View/APNSettingPage.xaml

    Unfortunately, the "ok" button is disabled when this page is directly invoked. If someone can figure out the right carrier to pick on the main page of the HTC Connection Setup xap, it will pop this page with an active "ok" button.

    HTC 8S
    thals1992 said:
    ##DIAG# launches CSDiag, but it takes a while to load. There were only three items shown inside, I think I had the same results as @timmymarsh, before he updated with flashlight, LED, and Vibrator as the only commands listed. I only had one of these in my hands for 40 seconds at a Cincinnati Bell store, so I couldn't update the app.

    HTC 8XT
    I hit up a local Sprint Reseller, to see if they had a demo Windows Phone device. They didn't have one there, so with my haggling I got them to unbox one, while I got to test out dial strings. I made a YouTube video that only 5 minutes long that includes a few things I got to test before I left. I might just pay them $50 to play with it for 14 days to return it. (I have no intention of actually paying for a cell plan that I don't need. )
    ##DIAG# launches CSDiag. (delayed as usual)
    ##PST# launches the EPST menu. It was more complicated and had wayyyy more features than I could figure out in the few minutes I had.
    ##MFG# launches "field test"
    ##DATA# works too.
    EDIT: I have been notified that either "111111" works or "sprint" works for the EPST and others in that same menu.
    I've done more research. You can find the link in my signature at the bottom of this post.

    HTC One M8 w/ Windows
    ##DIAG# launches HTC Function Test (CSDiag 1.01.01g)
    ##DATA# launches Service Tools (same as clicking on the app - generic info)
    ##PST# launches Service Tools (DiagnosticTool)
    ##786# does too....
    ##522# and ##552+call launches then crashes....
    ##MFG# launches EmbeddedTool (DiagnosticTool)
    Huawei Devices
    Huawei Ascend W1
    Diagnostics: ##2846579#





    Huawei Ascend W2
    [##2846579#] works for the Huawei Ascend W2, too. :good:


    Inaccessible Apps and Pages - (Only pages that work...)
    @cpuguy's Native Toast Notification Launcher can launch any any app and any page that's inside if it.

    Enter inside the text-box, the app-id, the handle, the app's file, ect.
    Nokia extras+info
    Code:
    app://2377fe1b-c10f-47da-92f3-fc517345a3c0/_default#/Launcher;component/MainPage.xaml?DialString=7820
    The string above launches extras+info and is launching the dial code for ##7820#. Notice no pound signs were used in the string.
    Here's a short list of dial codes that can be launched from it.
    The dialer codes for Nokia's at the top can also be used.
    Code:
    3282
    - field test (from my L928)
    wp_ss_20130808_0001.jpgwp_ss_20130808_0005.jpgwp_ss_20130808_0002.jpgwp_ss_20130808_0004.jpgwp_ss_20130808_0003.jpg
    Code:
    7820
    - sim lock page
    wp_ss_20130808_0008.jpgView attachment 2526208

    Diagnosis for the Samsung ATIV S, ATIV S Neo, and Odyssey
    Code for ATIV S (Tested v1.6.0.5):
    Code:
    app://07a20ad9-a4f9-4de3-855f-dcda8c8cab39/_default#/WP8Diag;component/
    Code for ATIV S NEO (Tested v1.0.0.8):
    Code:
    app://9dd0fa43-a6aa-4f82-b292-53e8e943a5b7/_default#/WP8Diag;component/
    Code for ATIV Odyssey (Tested v1.0.0.8):
    Code:
    app://51d4668e-01fa-4b6f-a8af-5170b5d7484c/_default#/WP8Diag;component/
    EDIT: See the attached files for the back half of the strings. I've hit the 30,000 character limit, and with these strings they are ~33,000.

    We still need your help!

    This wouldn't be here if it weren't other members contributing, so please keep reporting in! We are still missing codes from ALL Windows Phone 8.1 devices. I really don't need Lumia's anymore. They all pretty much share all the same dial codes from 8 to 8.1 Cyan. The only thing that might vary, is some of the codes will be disabled on some devices, whereas others will work.
    GO TO WIKIPEDIA TO FIND YOUR MODEL.
    5
    On Ativ S 8.1.1 :
    attachment.php
    attachment.php
    attachment.php
    attachment.php
    attachment.php
    attachment.php
    attachment.php
    attachment.php
    attachment.php
    attachment.php
    attachment.php
    attachment.php
    attachment.php
    attachment.php
    attachment.php
    attachment.php
    attachment.php
    attachment.php
    attachment.php
    3
    When i enter any of those commands, i get the HTC function test v1.01.01g (flashlight, LED & vibrator test).

    HTC8x.

    EDIT: Interesting, after running the commands, i now received an update for the CSDDiag tool (from HTC v1.1.23311.13243) which is now visible in the apps list. It contains a full set of diag tools:
    • backlight test
    • vibrator test
    • led test
    • button test
    • linedraw test
    • flashlight test
    • charger test
    • gsensor test
    • audio test
    • mic test
    • headset test
    • camera test
    • bluetooth test
    • wifi test
    • battery test
    • device info
    • factory rest
    • gps test
    • livecall test (receiver,psensor)
    • lightsensor test
    • nfc test

    Will have to play around with this for a while to see what they all do.
    3
    On the HTC 8x, you can launch a "hidden" APN settings page using the following URI: app://5edbdbbc-2ab2-df11-8a2f-00237de2db9e/_default#/View/APNSettingPage.xaml

    Unfortunately, the "ok" button is disabled when this page is directly invoked. If someone can figure out the right carrier to pick on the main page of the HTC Connection Setup xap, it will pop this page with an active "ok" button.

    Code:
     public static bool IsPopAPNSetting(COperatorItemCollection cOperatorItemCollection, string strDisplayName)
        {
          HTCDebug.LogReg("[IsPopAPNSetting]+", new object[0]);
          bool flag = false;
          try
          {
            string str1 = string.Empty;
            if (cOperatorItemCollection != null && 0 < cOperatorItemCollection.Count)
            {
              foreach (COperatorItem coperatorItem in (List<COperatorItem>) cOperatorItemCollection)
              {
                if (coperatorItem.DisplayName == strDisplayName)
                {
                  string str2 = string.Empty;
                  string str3;
                  if (CustomizationHelper.IsReadBranchDatabase())
                  {
                    str3 = "c:\\programs\\commonfiles\\adc\\MNS_Conn_" + coperatorItem.FolderName + "_branch.dbz";
                    if (!FileAccessHelper.IsFileExist(str3))
                      str3 = "c:\\programs\\commonfiles\\adc\\MNS_Conn_" + coperatorItem.FolderName + ".dbz";
                  }
                  else
                    str3 = "c:\\programs\\commonfiles\\adc\\MNS_Conn_" + coperatorItem.FolderName + ".dbz";
                  string strXmlIn = FileAccessHelper.ReadZipFileAsXMLString(str3, "Conn_UserData.provxml");
                  if (string.Empty != strXmlIn)
                  {
                    flag = true;
                    HTCDebug.LogReg("[IsPopAPNSetting]: bRet = {0}", new object[1]
                    {
                      (object) (bool) (flag ? 1 : 0)
                    });
                    CustomizationHelper.SetAPNSettingPageInputOKFlag(strXmlIn);
                    break;
                  }
                  else
                    break;
                }
              }
            }
            else
              HTCDebug.LogReg("[IsPopAPNSetting]: cOperatorItemCollection is null  or have no item", new object[0]);
          }
          catch (Exception ex)
          {
            HTCDebug.LogReg("[IsPopAPNSetting]Msg: {0}", new object[1]
            {
              (object) ex.Message
            });
            HTCDebug.LogReg("[IsPopAPNSetting]Exception: {0}", new object[1]
            {
              (object) ex.ToString()
            });
          }
          HTCDebug.LogReg("[IsPopAPNSetting]-", new object[0]);
          return flag;
        }
    2
    OK, finally started reverse engineering the Diagnosis app on ATIV S.

    The good news: the hash function is really easy to reverse. Many of the hashes take under a second. Some others... not so much, but I could (and probably should) multi-thread the brute forcing code.

    The hopeful news: there are a *ton* of useful functions hidden away in there, including registry reads and writes.

    The disappointing news: many of the most interesting features are disabled on my phone until or unless I can change some configuration... stuff. I'm not sure what the stuff in question is, though (one option involves the USB port, but I don't know much more). This needs more investigation.

    There are other apps that I haven't looked at yet, too.