WP8 Diagnostics and Hidden Apps Thread

Search This thread

thals1992

Senior Member
Sep 26, 2012
680
237
Cincinnati, OH
www.uidnation.com
I had just unboxed a Nokia Lumia 928 and didn't see anything about dialer codes for WP8 and it seemed that it had similar diagnostic functions leftover from the WP7 line. So, I though I'd start with mine and see if others would report what works on theirs too!

NOTE: I never reserved a second post, so it gets crammed all in one giant box. Sorry Tapatalk phone users!

Dial Codes' Location in the OEM ROMs
EFIESP\Windows\Logs\OemCustomizationTool.xml
\Windows\Logs\OemCustomizationTool.xml
\Windows\Packages\RegistryFiles\Microsoft.Comms.reg
\Windows\Packages\RegistryFiles\OEMSettings.reg

This came from RM860_1532.5957.1318.3021_RETAIL_nam_usa_100_21_185971_prd_signed.mnt.ffu
Code:
\Windows\Logs\OemCustomizationTool.xml
<Component ComponentName="Partner App Support">
  <SettingsGroup>
    <Setting Name="Partner Immediate Dial Strings" Value="##634#;##778#;##4678255#;*#07#;##07#"/>
    <Setting Name="Partner NonImmediate Dial Strings" Value="##778"/>
  </SettingsGroup>
</Component>
All Windows Phones
*#06# - Shows Carrier of SIM and the device IMEI.
Nokia Devices
Complete List of Lumia Dial Codes
This is a quick find list of Codes that work. The devices that are in the parenthesis are verified to work on the said devices.

##634# - Color Variant + Call Life Time Counter (L920, L928)
##4678255# - Tier3 Status (L920, L928)
*#07# or ##07# - Launch main page of extras+info
##778# - Product Support Tool
##3282# or ##3282w/call - Field Test (L521, L820, L920, L925)
##777# or ##777w/call - User Content Reset(tested on 1520 w/059V276 PROD code)
##7820# or ##7820w/call - SIM Lock Status

Nokia Lumia 525 (RM-998_apac_malaysia_935)

Works from the dialer:
##634# - Shows color variant and lifetime counter.
##07# - Opens extras+info and gives a page that says "Lumia Black" and lists the model and type followed by some logos of standards.
##4678255# - Shows Tier3 status, which I honestly can't make heads or tails out of beyond a list of apps and guids.

Needs native toast launcher:
##778# - Opens service tools, but nothing seems to be doable there. It says "select function set" but there's nothing to select.
##3282# - Opens field test. Tried locking network to 3G on one of the networks here that have bad reception, and that works perfectly.
##7820# - Shows sim lock status. Now this is where it gets weird. This is an unlocked phone bought in Malaysia and currently used in Sri Lanka on a Sri Lankan network (only the SIM card was given by the service provider). It's working perfectly, yet this claims that the phone is sim locked (shows a lock over a SIM card icon) and gives me a text box to enter a key which I don't have nor can ever obtain, since the phone wasn't purchased from a service provider.

Nokia Lumia 920
I get the same [results as the Lumia 928] on my AT&T branded 920, except that the ##4678255# doesn't show any installed apps.
##3282# does in fact work for the Lumia 521, 820, and 925. These devices have the ability to manually change their network type "2G, 3G, or LTE". Please note there was not a "4G" listed. As for specifically the 920, I've read ##3282 not ##3282# works following some sort of update not too long ago.
@berrywr Typing ##3282 + taping Call works on L920 unbranded.

Nokia Lumia 521, 820, and 925
##3282# does in fact work.
These devices have the ability to manually change their network type "2G, 3G, or LTE". Please note there was not a "4G" listed; either via the Field Test Mode or within Settings.
I can confirm 782 with Native Toast Notification Launcher on the Lumia 820 with the Amber update. First it asks me for a unlock code, but mine has been unlocked by code, so it was not a problem tap code again. After 3-5 times, it shows as unlocked.

Nokia Lumia 928

I've found new dial codes in the Rogers ROM [for the Lumia 920] following the GDR1 update. Here they are:
Note: All of these codes launch a sub section of the "extras+info" application through its GUID (2377fe1b-c10f-47da-92f3-fc517345a3c0)
NOTE: Most of the dial codes for the Lumia 928 is @cpuguy's work. I merely adjusted it about my device instead.
Color Variant + Life Time Counter
Code:
Code: ##MFG# (##634#)
Description: Also not new... Displays the multivariant color (my value is null but yours might be displayed) and life timer. It reads that info from the registry ("Software\OEM\Nokia\Multivariant\Color" and "Software\OEM\Nokia\lifetimecounter"). It also displays the modem version now.
Component: ColorVariant.dll
View attachment 2027390

Silent Installer Component - aka Tier 3 (Launches a screen titled Tier3 Status and displays several OEM installed apps)
Code:
Code: ##4678255#[/code}
Description: [The Lumia 920 from another thread] does nothing at this time but the code seems to indicate that it monitors for provxml files. The monitoring is actually done by the SilentInstallerServiceAgent (SilentInstallerServiceAgent.dll). It monitors for registry entries pointing to physical provxml files at "SOFTWARE\OEM\Nokia\SIAgent\Multivariant" and "SOFTWARE\OEM\Nokia\SIAgent\Tier3". It also monitors the physical folder "C:\Programs\CommonFiles\OEM\Public\PreloadedApps\tier3Apps". When new provxml files are detected, it executes them (I haven't seen any indication so far that it'll do anything besides file copy instructions).
Component: SilentInstallerComponent.dll
[ATTACH]2174947._xfImport[/ATTACH][ATTACH]2174948._xfImport[/ATTACH][ATTACH]2174949._xfImport[/ATTACH]
 
extras+info (launches the same page from settings)
[code]Code: *#07# or ##07#
Description: The code is purposely written to keep all elements on the main page to a "Collapse" visibility (meaning hidden). All the information would be normally displayed when launching the "extras+info" application is in fact populated.
Component: Regulatory.dll

Product Support Tool (no actual title)
Code:
Code: ##PST#  (##778#)
(can possibly be launched through an NFC tag if specifying a "DialString" argument with a of value "778" - untested)
Description: Has the same function on various WP7 devices; allows access to cell network settings. Uses a pass code of 000000. No fields are editable.
Component: ProductSupportTool.dll
View attachment 2027391View attachment 2027392View attachment 2027393View attachment 2027396View attachment 2027397

Various Nokia Lumia Devices - (Developer/Pre-production units only)
Some of the Lumias have a manually installed OEM app, On-Device Diagnostics Tool.
The following URL has multiple devices that has the app installed. To use the service you need a Nokia account, then it will prompt you to create a Nokia developer account. [NOTE: Its recommended you attach your developer id from your MS Dev account as part of the process for later use.]
http://developer.nokia.com/Devices/Remote_device_access/

EDIT 2: There isn't much info about on the ODDT from Nokia. I've uploaded and embedded the videos demonstrating the oem diagnostic tool and some other stuff I did in the session.



Samsung Devices

Samsung ATIV S
##MFG# (##634#) on my Samsung ATIV S SGH-T899M installs the "Diagnosis" app, which has a number of interesting powers.
##3282# [in the native dialer] gives many alternatives to edit/read on my GT-I8750 :D
@leffep: Whoa, nice find! Lots of options there on my SGH-T899M as well (different model ATIV S).
All Diagnosis Codes
I've decompiled Diagnosis and decrypted its codes.

Only type Always codes work.
Code:
Name                       Hash         Type               Code       
====                       ====         ====               ====       
Rebooting                  1687085864   BlockType.None     *#350#     
MultiTouch                 4130821352   BlockType.None     *#0987#    
SWversionEx                4131750170   BlockType.Always   *#1234#    
SWversionNewIn             4250458108   BlockType.Always   *#9562678**
SWversionNewIn_COMMON      3579507701   BlockType.Always   *#16199112*
buildInfo                  3525297214   BlockType.Always   *#99732#   
ProductionError            1842166158   BlockType.Always   *#732873#  
LcdTimeoutON               1687049927   BlockType.None     *#250#     
LcdTimeoutOFF              1687049960   BlockType.None     *#251#     
SMDINFO                    51120467     BlockType.None     *#03#      
PVKKey                     3525302758   BlockType.Always   *#99785#   
PVKFileName                370874684    BlockType.Always   *#997856#  
SerialNumber               1847946636   BlockType.None     *#737425#  
DebugOption                4138939616   BlockType.None     *#7450#    
ScreenCapture              672812247    BlockType.None     *#666777#  
CHNLPR                     4018532303   BlockType.None     *#246577#  
CSCConverter               1151388288   BlockType.Always   *#78*598031
CSCConverter_inner         3245274955   BlockType.Always   *#24320#   
CSCConverter_common        99999999     BlockType.Always   *#321647335
unlockdevice               440122119    BlockType.None     *#608090#  
CPUChipInfo                3419028964   BlockType.Always   *#2784636# 
TotalCalltime              3277063155   BlockType.Always   *#22558463#
FTAMain                    1670         BlockType.Always              
VIEWHISTORYNW              4138974695   BlockType.Always   *#7547#    
SIMPLE_FUNCTION_TEST       51120533     BlockType.None     *#05#      
SELF_DIAGNOSTIC_MODE       4138903778   BlockType.None     *#7353#    
BRIGHTNESS_TEST            51123437     BlockType.None     *#3*#      
SOUNDTEST                  4130712386   BlockType.None     *#0675#    
AccelerometerSensor        3242868430   BlockType.None     *#22235#   
BATTERYMONITOR             4141486820   BlockType.None     *#9911#    
CAMERAUPDATE               1214855129   BlockType.Always   *#34971539#
CAMERAUPDATESVC            1907018268   BlockType.Always   *#7412365# 
LIGHTSENSORTEST            4130677670   BlockType.None     *#0589#    
BATT_TEST                  51122348     BlockType.Always   *#2*#      
GPS_TEST                   1814073437   BlockType.None     *#771280*67
BATTERYINFO                4130563292   BlockType.Always   *#0228#    
DEVICETEST                 4130780894   BlockType.Always   *#0842#    
RTC                        4130749313   BlockType.None     *#0782#    
AUDIOTEST                  4130712320   BlockType.None     *#0673#    
AUDIOTEST2                 4130569859   BlockType.None     *#0289#    
ILLUMINATIONTEST           4130780927   BlockType.None     *#0843#    
PHONELOOPBACKTEST          4130569661   BlockType.Always   *#0283#    
USBPATHCHANGE              4138871141   BlockType.Always   *#7284#    
BLUETOOTH_MAC_VIEWER       3974576996   BlockType.Always   *#232337#  
BLUETOOTH_RF_TEST          3974576798   BlockType.Always   *#232331#  
BLUETOOTH_AUDIO_TEST       3974576831   BlockType.None     *#232332#  
BLUETOOTH_SEARCH_TEST      3974576864   BlockType.None     *#232333#  
WIFI_MAC_VIEWER            3974577029   BlockType.Always   *#232338#  
WIFI_TEST                  3974577062   BlockType.None     *#232339#  
WIFI_FACTORY_TEST          1687154669   BlockType.None     *#526#     
NFC                        993032389    BlockType.Always   *#6328378# 
AUDIOCODEC                 2418895042   BlockType.None                
AUDIOGAINCONTROL           2418895075   BlockType.None                
FMRADIORX                  4130603585   BlockType.None     *#0368#    
FMRADIORX_COMMON           4134271370   BlockType.None     *#3689#    
MICROUSB_TEST              4131936356   BlockType.None     *#1793#    
LCDTEST                    51120170     BlockType.Always   *#0*#      
TouchFirmare_2663          4133083073   BlockType.Always   *#2663#    
TouchDelta_80              51129080     BlockType.None     *#80#      
BT_LogDisable              362345438    BlockType.None     *#9902*0#  
BT_LogEnable               362345471    BlockType.None     *#9902*1#  
BT_SSPDEbugModeEnable      362345504    BlockType.None     *#9902*2#  
BT_SSPDEbugModeDisable     362345537    BlockType.None     *#9902*3#  
PowerOffSetting            4138980041   BlockType.None     *#7594#    
TouchkeySensitivity        3482638972   BlockType.Always   *#86824#   
ProximityTest              4139048813   BlockType.Always   *#7769#    
LCDDimmingTestLoop         68478722     BlockType.None     *#5235667# 
CompassLog                 513825771    BlockType.None     *#624564#  
EnableNever                3400811611   BlockType.None     *#63837#   
TouchSpecVerifier          4189735160   BlockType.None                
APPSLAUNCHER               54201206     BlockType.None     *#914789#  
NetworkSettingInfo         4141487876   BlockType.Always   *#9920#    
ConnProflieSetting         4141485962   BlockType.Always   *#9908#    
RUNAPP                     2042365872   BlockType.None     *#786227#  
IPSetting                  3974577854   BlockType.Always   *#232340#  
CDMATEST                   1695532268   BlockType.None     *#455037698
CDMATEST                   1695534446   BlockType.None     *#455037898
DMGCF                      3207361684   BlockType.None     *#15428#   
DataScreen                 2764154383   BlockType.None                
CDMA_LTE_NETTYPE           51377652     BlockType.None     *#45503589 
TESTMODE                   2315889864   BlockType.None                
SWversionFTA               4141495796   BlockType.Always   *#9999#    
HWversionFTA               4140272816   BlockType.Always   *#8888#    
SWversionFTA               4131711956   BlockType.Always   *#1111#    
HWversionFTA               4132934936   BlockType.Always   *#2222#    
DEBUGMODE1                 4130490098   BlockType.Always   *#0011#    
CIPHERING                  3282081274   BlockType.None     *#32489#   
INTEGRITY                  4133049215   BlockType.None     *#2580#    
UARTCHANGER                4141172066   BlockType.None     *#9090#    
RRCVERSION                 4130678759   BlockType.None     *#0599#    
GPSTEST                    4131862370   BlockType.None     *#1575#    
BANDSELECTION              4132939325   BlockType.None     *#2263#    
GCFTESTMODE_ENTER          403159779    BlockType.None     *#4238378# 
ReactivateSellOutSMS       2155722335   BlockType.None     *#509733**#
DisableSellOutSMS          2419357615   BlockType.None     *#999001**2
SellOutSMSTestMode         2531766893   BlockType.None                
SellOutSMSProductionMode   2530723466   BlockType.None     *#561277575
SellOutSMS                 3494684894   BlockType.None     *#1784229*6
POWERONATTACH              4138872362   BlockType.None     *#7298#    
OperatorDebug              1067070358   BlockType.None     *#37375625#
AutoReceive_Enable         4012662285   BlockType.None     *#4505**554
AutoReceive_Disable        3568836989   BlockType.None                
CollectLog                 3525042124   BlockType.None     *#9900*#   
RetailLog                  4141485698   BlockType.Always   *#9900#    
DEBUGDUMP                  4130669882   BlockType.None     *#0514#    
RILDUMP                    1687228688   BlockType.Always   *#745#     
LOCK_STATUS_INFO           2106356451   BlockType.None     *#7465625# 
EN_LOCK_NW                 3153231157   BlockType.None     *#303176*91
DIS_LOCK_NW                489744846    BlockType.None                
EN_LOCK_SUB_NW             3154590229   BlockType.None     *#13061*685
DIS_LOCK_SUB_NW            491103918    BlockType.None                
EN_LOCK_SVC                4130258530   BlockType.None     *#362077129
DIS_LOCK_SVC               3398794203   BlockType.None     *#446255022
EN_LOCK_CORP               4130078845   BlockType.None     *#362072129
DIS_LOCK_CORP              3398614518   BlockType.None     *#446250022
VERIFYCOMPARE              4141495499   BlockType.Always   *#9990#    
IMEI_NUMBER                51120566     BlockType.Always   *#06#      
RESET_FACTORY              2002483970   BlockType.None     *#951001849
HIDDEN_TEST                1468447360   BlockType.None     *#2106*41*1
HIDDEN_TEST_RTNMenu        1413285326   BlockType.None                
DNS_DISABLE                3737272694   BlockType.None                
HIDDEN_TEST                2722728366   BlockType.None                
HIDDEN_TEST                4134127391   BlockType.None     *#3282#    
HIDDEN_TEST                651520162    BlockType.None     *#3214789# 
HIDDEN_TEST                3682702876   BlockType.None                
HIDDEN_TEST                113137464    BlockType.None     *#7597308**
HIDDEN_TEST                3683786200   BlockType.None     *#70*297080
HIDDEN_TEST                324852231    BlockType.None                
HIDDEN_TEST                3109716334   BlockType.None                
HIDDEN_TEST                119210817    BlockType.None     *#7597848**
HIDDEN_TEST                1270103692   BlockType.None                
HIDDEN_TEST                1413321362   BlockType.None                
Rebooting                  1462373143   BlockType.None                
SAR                        51120599     BlockType.Always   *#07#
(Where is the Samsung ATIV S specific forum? >_<)
Here are some codes for ATIV S, these are intended to be inserted in the Diagnostic Dialer
IMEI Number Prompt: *#06#
Screen and vibration test menu: *#0*#
Battery test menu: *#0228#
Firmware version prompt: *#1234#
FTA SW Version menu: *#1111#
FTA HW Version menu: *#2222#
FTA HW Version menu: *#8888#
FTA SW Version menu: *#9999#
Basic information Testmode menu: *#0011#
Vibrations test menu: *#0842#
Bluetooth MAC Address prompt: *#232337#
I don't know what the FTA menus are for, but they look dangerous (and potentially useful).
Hidden Test Menu
When you install diagnosis app via ##634# code and you type 3 digits starting with 15 (last digit doesn't matter) you will have access to a hidden test menu... For example we can view the Samsung ROM version (mine is I8750XXAMC1)
Unfortunately I can't take a screenshot while viewing that menu. I hope someone will make something useful from this info :)
Extra Hidden Menu
Launch the diagnostic dialer as usual.
2nd open up:
FTA SW Version menu: *#9999#
3rd: TYPE THE FOLLOWING VERY QUICKLY! If you do this slow, nothing happens!!!
*#0
you will see the following menu
please be careful!!!!
Micro USB Menu (USB Path Control): *#7284#
I think it's old, but if you enter a test menu (for example using *#2222#) you can reach the 'root' by pressing the 'back' buttons multiple times and then you can navigate the tree as you like.
attachment.php
attachment.php
on Samsung Micro USB test has 3 Options :

zune sync
modem, tethered Call
modem, usb diag

USB TETHERING:

Playing along with the phone, I've noticed that typing ##778# into the phone's dialer also launches the Diagnosis menu(Odyssey_121205). Don't know if it's old news but I wanted to spread the info. My phone is an ATIV S - I8750, unbranded. I'm currently on Orange Romania network but the phone works on any networks. My current CSC is ATO. I left it this way because there is no CSC for Romania in the menu(not even the OXX type). Running the last GDR3 update.
HTC Devices
HTC 8X
When I enter any of those commands, I get the HTC Function Test v1.01.01g (flashlight, LED & vibrator test).
After running the commands, theres an update for the CSDDiag tool (from HTC v1.1.23311.13243) which is now visible in the apps list. It contains a full of diag tools:
Backlight, Vibrator, LED, Button, Linedraw, Flashlight, Charger, gsensor, Audio, Mic, Headset, Camera, Bluetooth, WiFi, Battery, GPS, LiveCall (receiver,psensor), LightSensor, and NFC test menus.
Also contains device info, and factory reset.

On the HTC 8x, you can launch a "hidden" APN settings page using the following URI [using cpuguy's Native Toast Notification Launcher] : app://5edbdbbc-2ab2-df11-8a2f-00237de2db9e/_default#/View/APNSettingPage.xaml

Unfortunately, the "ok" button is disabled when this page is directly invoked. If someone can figure out the right carrier to pick on the main page of the HTC Connection Setup xap, it will pop this page with an active "ok" button.

HTC 8S
thals1992 said:
##DIAG# launches CSDiag, but it takes a while to load. There were only three items shown inside, I think I had the same results as @timmymarsh, before he updated with flashlight, LED, and Vibrator as the only commands listed. I only had one of these in my hands for 40 seconds at a Cincinnati Bell store, so I couldn't update the app.

HTC 8XT
I hit up a local Sprint Reseller, to see if they had a demo Windows Phone device. They didn't have one there, so with my haggling I got them to unbox one, while I got to test out dial strings. I made a YouTube video that only 5 minutes long that includes a few things I got to test before I left. I might just pay them $50 to play with it for 14 days to return it. (I have no intention of actually paying for a cell plan that I don't need. )
##DIAG# launches CSDiag. (delayed as usual)
##PST# launches the EPST menu. It was more complicated and had wayyyy more features than I could figure out in the few minutes I had.
##MFG# launches "field test"
##DATA# works too.
EDIT: I have been notified that either "111111" works or "sprint" works for the EPST and others in that same menu.
I've done more research. You can find the link in my signature at the bottom of this post.

HTC One M8 w/ Windows
##DIAG# launches HTC Function Test (CSDiag 1.01.01g)
##DATA# launches Service Tools (same as clicking on the app - generic info)
##PST# launches Service Tools (DiagnosticTool)
##786# does too....
##522# and ##552+call launches then crashes....
##MFG# launches EmbeddedTool (DiagnosticTool)
Huawei Devices
Huawei Ascend W1
Diagnostics: ##2846579#





Huawei Ascend W2
[##2846579#] works for the Huawei Ascend W2, too. :good:


Inaccessible Apps and Pages - (Only pages that work...)
@cpuguy's Native Toast Notification Launcher can launch any any app and any page that's inside if it.

Enter inside the text-box, the app-id, the handle, the app's file, ect.
Nokia extras+info
Code:
app://2377fe1b-c10f-47da-92f3-fc517345a3c0/_default#/Launcher;component/MainPage.xaml?DialString=7820
The string above launches extras+info and is launching the dial code for ##7820#. Notice no pound signs were used in the string.
Here's a short list of dial codes that can be launched from it.
The dialer codes for Nokia's at the top can also be used.
Code:
3282
- field test (from my L928)
wp_ss_20130808_0001.jpgwp_ss_20130808_0005.jpgwp_ss_20130808_0002.jpgwp_ss_20130808_0004.jpgwp_ss_20130808_0003.jpg
Code:
7820
- sim lock page
wp_ss_20130808_0008.jpgView attachment 2526208

Diagnosis for the Samsung ATIV S, ATIV S Neo, and Odyssey
Code for ATIV S (Tested v1.6.0.5):
Code:
app://07a20ad9-a4f9-4de3-855f-dcda8c8cab39/_default#/WP8Diag;component/
Code for ATIV S NEO (Tested v1.0.0.8):
Code:
app://9dd0fa43-a6aa-4f82-b292-53e8e943a5b7/_default#/WP8Diag;component/
Code for ATIV Odyssey (Tested v1.0.0.8):
Code:
app://51d4668e-01fa-4b6f-a8af-5170b5d7484c/_default#/WP8Diag;component/
EDIT: See the attached files for the back half of the strings. I've hit the 30,000 character limit, and with these strings they are ~33,000.

We still need your help!

This wouldn't be here if it weren't other members contributing, so please keep reporting in! We are still missing codes from ALL Windows Phone 8.1 devices. I really don't need Lumia's anymore. They all pretty much share all the same dial codes from 8 to 8.1 Cyan. The only thing that might vary, is some of the codes will be disabled on some devices, whereas others will work.
GO TO WIKIPEDIA TO FIND YOUR MODEL.
 

Attachments

  • ATIV_S_WP8Diag_HiddenKeyTable.cs.txt
    19.4 KB · Views: 1,567
  • Neo_WP8Diag_HiddenKeyTable.cs.txt
    20.4 KB · Views: 752
  • OdysseyWP8GDR3Diag_HiddenKeyTable.cs.txt
    20.3 KB · Views: 641
Last edited:

GoodDayToDie

Inactive Recognized Developer
Jan 20, 2011
6,066
2,931
Seattle
##DIAG# on some WP7 phones would do things...

##MFG# on my Samsung ATIV S SGH-T899M displays (and installs) the "Diagnosis" app, which has a number of interesting powers. I should reverse engineer it...
 

timmymarsh

Senior Moderator - Emeritus
Mar 26, 2007
5,135
1,173
Just one More
When i enter any of those commands, i get the HTC function test v1.01.01g (flashlight, LED & vibrator test).

HTC8x.

EDIT: Interesting, after running the commands, i now received an update for the CSDDiag tool (from HTC v1.1.23311.13243) which is now visible in the apps list. It contains a full set of diag tools:
  • backlight test
  • vibrator test
  • led test
  • button test
  • linedraw test
  • flashlight test
  • charger test
  • gsensor test
  • audio test
  • mic test
  • headset test
  • camera test
  • bluetooth test
  • wifi test
  • battery test
  • device info
  • factory rest
  • gps test
  • livecall test (receiver,psensor)
  • lightsensor test
  • nfc test

Will have to play around with this for a while to see what they all do.
 
Last edited:

slipknot28

Member
Apr 17, 2010
27
3
When i enter any of those commands, i get the HTC function test v1.01.01g (flashlight, LED & vibrator test).

HTC8x.

EDIT: Interesting, after running the commands, i now received an update for the CSDDiag tool (from HTC v1.1.23311.13243) which is now visible in the apps list. It contains a full set of diag tools:
  • backlight test
  • vibrator test
  • led test
  • button test
  • linedraw test
  • flashlight test
  • charger test
  • gsensor test
  • audio test
  • mic test
  • headset test
  • camera test
  • bluetooth test
  • wifi test
  • battery test
  • device info
  • factory rest
  • gps test
  • livecall test (receiver,psensor)
  • lightsensor test
  • nfc test

Will have to play around with this for a while to see what they all do.

How did you manage do get update of CSDDiag tool?
 

timmymarsh

Senior Moderator - Emeritus
Mar 26, 2007
5,135
1,173
Just one More
How did you manage do get update of CSDDiag tool?

my guess is when i entered.the command's above (all of which started the same hidden app), it kick started the update procedure for the outdated diag tool which was never normally visible, it was a marketplace (store) update, however the app is not visible when searching the store. It surprised me to be honest, these diag tools are normally always hidden. However the hidden app is now clearly visible in my app list and no longer needs any special commands to start it.
 

GoodDayToDie

Inactive Recognized Developer
Jan 20, 2011
6,066
2,931
Seattle
Yeah, that's standard. It worked the same on WP7 for the Samsung app, at least. One nice thing is you can roll back the installed version to the original one embedded in your ROM if an update closes a hole that some hack needed. Just delete the app (like normal, from the list) and then re-install it using the dialer.
 

cevi

Senior Member
Feb 4, 2012
182
12
Belgrade
For screen capture on HTC 8S - Tap and hold the Windows button and then press the power button.

Sent from my Windows Phone 8S by HTC using Board Express
 

thals1992

Senior Member
Sep 26, 2012
680
237
Cincinnati, OH
www.uidnation.com
I figured the screenshot thing. A quick bing did the job.
I wonder what the modem version thing is because its separate from the radio version. I originally thought it would be the radio, but the versions didn't match, so it didn't make any sense. Anyone have a similar experience with any other Lumia?
 

thals1992

Senior Member
Sep 26, 2012
680
237
Cincinnati, OH
www.uidnation.com
More Dial Codes

Okay, so I've found more codes that actually work.
I've found a few new dial codes in the Rogers ROM following the Portico update. Here they are:
Note: All of these codes launch a sub section of the "extras+info" application through its GUID (2377fe1b-c10f-47da-92f3-fc517345a3c0)

Field Test
Code: ##3282# (or ##3282 + call)
Description: This one's not new, offers some statistics on radio. The settings also allow you to change a few things (such as network type, SMS limits, ENS and CMAS RMT).
Component: FTDComponent.dll

Color Variant + Life Time Counter
Code: ##634#
Description: Also not new... Displays the multivariant color (my value is null but yours might be displayed) and life timer. It reads that info from the registry ("Software\OEM\Nokia\Multivariant\Color" and "Software\OEM\Nokia\lifetimecounter").
Component: ColorVariant.dll

Silent Installer Component (no actual title - found a reference to "TestUI" so this may simply be a test)
Code: ##4678255#
Description: Mine does nothing at this time but the code seems to indicate that it monitors for provxml files. The monitoring is actually done by the SilentInstallerServiceAgent (SilentInstallerServiceAgent.dll). It monitors for registry entries pointing to physical provxml files at "SOFTWARE\OEM\Nokia\SIAgent\Multivariant" and "SOFTWARE\OEM\Nokia\SIAgent\Tier3". It also monitors the physical folder "C:\Programs\CommonFiles\OEM\Public\PreloadedApps\tier3Apps". When new provxml files are detected, it executes them (I haven't seen any indication so far that it'll do anything besides file copy instructions).
Component: SilentInstallerComponent.dll

extras+info (nothing displayed)
Code: *#07# or ##07#
Description: It gives a completely blank screen. The code is purposely written to keep all elements on the main page to a "Collapse" visibility (meaning hidden). But all the information that would be normally displayed when launching the "extras+info" application is in fact populated.
Component: Regulatory.dll


There's one last dial code that is in theory coded into the phone but the ROM doesn't trigger the action (it's not part of the OS support dial strings):

Product Support Tool (no actual title)
Code: N/A (can possibly be launched through an NFC tag if specifying a "DialString" argument with a of value "778" - I ordered some NFC tags to try it out)
Description: Because I haven't been able to run this app yet, I'm only speculating based on a quick code review... Allows you to view and modify some core cellular settings. You'll be prompted to enter an SPC (security code) before proceeding into certain (if not all) screens.
Component: ProductSupportTool.dll

##3282# does nothing.
##634# work as stated in the first post.
##4678255# Launches a screen titled Tier3 Status and displays several installed apps.
##07# actually launches the same app from settings.
##778# works as stated in the first post.

It seems the post I quoted only is relative to Nokia Lumia Devices.
 
Last edited:

Nitro40

New member
Jun 27, 2008
1
0
##3282# does nothing.
##634# work as stated in the first post.
##4678255# Launches a screen titled Tier3 Status and displays several installed apps.
##07# actually launches the same app from settings.
##778# works as stated in the first post.

It seems the post I quoted only is relative to Nokia Lumia Devices.

I get the same think on my ATT 920. Except that the ##4678255# does not show any installed apps for me.
 

thals1992

Senior Member
Sep 26, 2012
680
237
Cincinnati, OH
www.uidnation.com
I've found some more!

The list is long, so I'll just post a url link.
http://computertutorialsdirectory.blogspot.com
I'll post when I've tried some. Most of these are for their Symbian devices, but I think I've heard somewhere that the Lumia uses some of those codes.

edit:
I'm trying to find a better title for this thread (can someone recommend one, then cleanup this thread later? I can see this thread being 10s of pages long.) There might be some useful hidden information in this thread, like the component level access in the post above, but I hate to kinda keep bumping this thread like I have been (and seems to scream NOOB OVER THERE. or am I just posting too often?) Can anyone recommend where I (or a mod) should possibly move this thread to get better reception? The one thing that I'd really like to see is the EPST menu unlocked. I know there is a lot more users using different phones in here than just Lumias (I used to be stuck on the HTC 7 Trophy - Spark_W edition. -_-) that could have some use changing the settings here, like the ability to change the DUN NAI settings, to allow tethering on a non-tethering plan.

Sorry for all the questions
 
Last edited:

leffep

Senior Member
Mar 27, 2007
341
23
Okay, so I've found more codes that actually work.


##3282# does nothing.
##634# work as stated in the first post.
##4678255# Launches a screen titled Tier3 Status and displays several installed apps.
##07# actually launches the same app from settings.
##778# works as stated in the first post.

It seems the post I quoted only is relative to Nokia Lumia Devices.

##3282# gives many alternatives to edit/read on my Samsung AtivS GT-I8750
ill try to take screenpictures later
:D
 
  • Like
Reactions: GoodDayToDie

GoodDayToDie

Inactive Recognized Developer
Jan 20, 2011
6,066
2,931
Seattle
@leffep: Whoa, nice find! Lots of options there on my SGH-T899M as well (different model ATIV S). I'll have to investigate.

Actually, what I really need to do is decompile this bad boy. Anybody know where I can get the XAP? A ROM dump, or even the file name and location on the device, would work fine...

EDIT: Looks like I'm going to need an actual ROM dump. Pre-installed XAPs seem to be in \programs\commonfiles\xaps\ now, which is a location not readable by other apps. I was hoping they would still be under \windows\, but it seems that's not the case (no files found there).
 
Last edited:

jemaho

Senior Member
Apr 7, 2009
219
39
Waregem
my guess is when i entered.the command's above (all of which started the same hidden app), it kick started the update procedure for the outdated diag tool which was never normally visible, it was a marketplace (store) update, however the app is not visible when searching the store. It surprised me to be honest, these diag tools are normally always hidden. However the hidden app is now clearly visible in my app list and no longer needs any special commands to start it.

Same here, by playing with the hidden tools, it all of sudden appeared in my start menu! Waiting now to see if the update will show up in the store!
 

GoodDayToDie

Inactive Recognized Developer
Jan 20, 2011
6,066
2,931
Seattle
That was standard on WP7 and is nothing new. The XAP file for the app (and all other pre-installed ones) is included in ROM (I believe it's in \programs\common\xaps\) but until it is invoked through the dialer, it will not appear in the app list.
 

Top Liked Posts

  • There are no posts matching your filters.
  • 9
    I had just unboxed a Nokia Lumia 928 and didn't see anything about dialer codes for WP8 and it seemed that it had similar diagnostic functions leftover from the WP7 line. So, I though I'd start with mine and see if others would report what works on theirs too!

    NOTE: I never reserved a second post, so it gets crammed all in one giant box. Sorry Tapatalk phone users!

    Dial Codes' Location in the OEM ROMs
    EFIESP\Windows\Logs\OemCustomizationTool.xml
    \Windows\Logs\OemCustomizationTool.xml
    \Windows\Packages\RegistryFiles\Microsoft.Comms.reg
    \Windows\Packages\RegistryFiles\OEMSettings.reg

    This came from RM860_1532.5957.1318.3021_RETAIL_nam_usa_100_21_185971_prd_signed.mnt.ffu
    Code:
    \Windows\Logs\OemCustomizationTool.xml
    <Component ComponentName="Partner App Support">
      <SettingsGroup>
        <Setting Name="Partner Immediate Dial Strings" Value="##634#;##778#;##4678255#;*#07#;##07#"/>
        <Setting Name="Partner NonImmediate Dial Strings" Value="##778"/>
      </SettingsGroup>
    </Component>
    All Windows Phones
    *#06# - Shows Carrier of SIM and the device IMEI.
    Nokia Devices
    Complete List of Lumia Dial Codes
    This is a quick find list of Codes that work. The devices that are in the parenthesis are verified to work on the said devices.

    ##634# - Color Variant + Call Life Time Counter (L920, L928)
    ##4678255# - Tier3 Status (L920, L928)
    *#07# or ##07# - Launch main page of extras+info
    ##778# - Product Support Tool
    ##3282# or ##3282w/call - Field Test (L521, L820, L920, L925)
    ##777# or ##777w/call - User Content Reset(tested on 1520 w/059V276 PROD code)
    ##7820# or ##7820w/call - SIM Lock Status

    Nokia Lumia 525 (RM-998_apac_malaysia_935)

    Works from the dialer:
    ##634# - Shows color variant and lifetime counter.
    ##07# - Opens extras+info and gives a page that says "Lumia Black" and lists the model and type followed by some logos of standards.
    ##4678255# - Shows Tier3 status, which I honestly can't make heads or tails out of beyond a list of apps and guids.

    Needs native toast launcher:
    ##778# - Opens service tools, but nothing seems to be doable there. It says "select function set" but there's nothing to select.
    ##3282# - Opens field test. Tried locking network to 3G on one of the networks here that have bad reception, and that works perfectly.
    ##7820# - Shows sim lock status. Now this is where it gets weird. This is an unlocked phone bought in Malaysia and currently used in Sri Lanka on a Sri Lankan network (only the SIM card was given by the service provider). It's working perfectly, yet this claims that the phone is sim locked (shows a lock over a SIM card icon) and gives me a text box to enter a key which I don't have nor can ever obtain, since the phone wasn't purchased from a service provider.

    Nokia Lumia 920
    I get the same [results as the Lumia 928] on my AT&T branded 920, except that the ##4678255# doesn't show any installed apps.
    ##3282# does in fact work for the Lumia 521, 820, and 925. These devices have the ability to manually change their network type "2G, 3G, or LTE". Please note there was not a "4G" listed. As for specifically the 920, I've read ##3282 not ##3282# works following some sort of update not too long ago.
    @berrywr Typing ##3282 + taping Call works on L920 unbranded.

    Nokia Lumia 521, 820, and 925
    ##3282# does in fact work.
    These devices have the ability to manually change their network type "2G, 3G, or LTE". Please note there was not a "4G" listed; either via the Field Test Mode or within Settings.
    I can confirm 782 with Native Toast Notification Launcher on the Lumia 820 with the Amber update. First it asks me for a unlock code, but mine has been unlocked by code, so it was not a problem tap code again. After 3-5 times, it shows as unlocked.

    Nokia Lumia 928

    I've found new dial codes in the Rogers ROM [for the Lumia 920] following the GDR1 update. Here they are:
    Note: All of these codes launch a sub section of the "extras+info" application through its GUID (2377fe1b-c10f-47da-92f3-fc517345a3c0)
    NOTE: Most of the dial codes for the Lumia 928 is @cpuguy's work. I merely adjusted it about my device instead.
    Color Variant + Life Time Counter
    Code:
    Code: ##MFG# (##634#)
    Description: Also not new... Displays the multivariant color (my value is null but yours might be displayed) and life timer. It reads that info from the registry ("Software\OEM\Nokia\Multivariant\Color" and "Software\OEM\Nokia\lifetimecounter"). It also displays the modem version now.
    Component: ColorVariant.dll
    View attachment 2027390

    Silent Installer Component - aka Tier 3 (Launches a screen titled Tier3 Status and displays several OEM installed apps)
    Code:
    Code: ##4678255#[/code}
    Description: [The Lumia 920 from another thread] does nothing at this time but the code seems to indicate that it monitors for provxml files. The monitoring is actually done by the SilentInstallerServiceAgent (SilentInstallerServiceAgent.dll). It monitors for registry entries pointing to physical provxml files at "SOFTWARE\OEM\Nokia\SIAgent\Multivariant" and "SOFTWARE\OEM\Nokia\SIAgent\Tier3". It also monitors the physical folder "C:\Programs\CommonFiles\OEM\Public\PreloadedApps\tier3Apps". When new provxml files are detected, it executes them (I haven't seen any indication so far that it'll do anything besides file copy instructions).
    Component: SilentInstallerComponent.dll
    [ATTACH]2174947._xfImport[/ATTACH][ATTACH]2174948._xfImport[/ATTACH][ATTACH]2174949._xfImport[/ATTACH]
     
    extras+info (launches the same page from settings)
    [code]Code: *#07# or ##07#
    Description: The code is purposely written to keep all elements on the main page to a "Collapse" visibility (meaning hidden). All the information would be normally displayed when launching the "extras+info" application is in fact populated.
    Component: Regulatory.dll

    Product Support Tool (no actual title)
    Code:
    Code: ##PST#  (##778#)
    (can possibly be launched through an NFC tag if specifying a "DialString" argument with a of value "778" - untested)
    Description: Has the same function on various WP7 devices; allows access to cell network settings. Uses a pass code of 000000. No fields are editable.
    Component: ProductSupportTool.dll
    View attachment 2027391View attachment 2027392View attachment 2027393View attachment 2027396View attachment 2027397

    Various Nokia Lumia Devices - (Developer/Pre-production units only)
    Some of the Lumias have a manually installed OEM app, On-Device Diagnostics Tool.
    The following URL has multiple devices that has the app installed. To use the service you need a Nokia account, then it will prompt you to create a Nokia developer account. [NOTE: Its recommended you attach your developer id from your MS Dev account as part of the process for later use.]
    http://developer.nokia.com/Devices/Remote_device_access/

    EDIT 2: There isn't much info about on the ODDT from Nokia. I've uploaded and embedded the videos demonstrating the oem diagnostic tool and some other stuff I did in the session.



    Samsung Devices

    Samsung ATIV S
    ##MFG# (##634#) on my Samsung ATIV S SGH-T899M installs the "Diagnosis" app, which has a number of interesting powers.
    ##3282# [in the native dialer] gives many alternatives to edit/read on my GT-I8750 :D
    @leffep: Whoa, nice find! Lots of options there on my SGH-T899M as well (different model ATIV S).
    All Diagnosis Codes
    I've decompiled Diagnosis and decrypted its codes.

    Only type Always codes work.
    Code:
    Name                       Hash         Type               Code       
    ====                       ====         ====               ====       
    Rebooting                  1687085864   BlockType.None     *#350#     
    MultiTouch                 4130821352   BlockType.None     *#0987#    
    SWversionEx                4131750170   BlockType.Always   *#1234#    
    SWversionNewIn             4250458108   BlockType.Always   *#9562678**
    SWversionNewIn_COMMON      3579507701   BlockType.Always   *#16199112*
    buildInfo                  3525297214   BlockType.Always   *#99732#   
    ProductionError            1842166158   BlockType.Always   *#732873#  
    LcdTimeoutON               1687049927   BlockType.None     *#250#     
    LcdTimeoutOFF              1687049960   BlockType.None     *#251#     
    SMDINFO                    51120467     BlockType.None     *#03#      
    PVKKey                     3525302758   BlockType.Always   *#99785#   
    PVKFileName                370874684    BlockType.Always   *#997856#  
    SerialNumber               1847946636   BlockType.None     *#737425#  
    DebugOption                4138939616   BlockType.None     *#7450#    
    ScreenCapture              672812247    BlockType.None     *#666777#  
    CHNLPR                     4018532303   BlockType.None     *#246577#  
    CSCConverter               1151388288   BlockType.Always   *#78*598031
    CSCConverter_inner         3245274955   BlockType.Always   *#24320#   
    CSCConverter_common        99999999     BlockType.Always   *#321647335
    unlockdevice               440122119    BlockType.None     *#608090#  
    CPUChipInfo                3419028964   BlockType.Always   *#2784636# 
    TotalCalltime              3277063155   BlockType.Always   *#22558463#
    FTAMain                    1670         BlockType.Always              
    VIEWHISTORYNW              4138974695   BlockType.Always   *#7547#    
    SIMPLE_FUNCTION_TEST       51120533     BlockType.None     *#05#      
    SELF_DIAGNOSTIC_MODE       4138903778   BlockType.None     *#7353#    
    BRIGHTNESS_TEST            51123437     BlockType.None     *#3*#      
    SOUNDTEST                  4130712386   BlockType.None     *#0675#    
    AccelerometerSensor        3242868430   BlockType.None     *#22235#   
    BATTERYMONITOR             4141486820   BlockType.None     *#9911#    
    CAMERAUPDATE               1214855129   BlockType.Always   *#34971539#
    CAMERAUPDATESVC            1907018268   BlockType.Always   *#7412365# 
    LIGHTSENSORTEST            4130677670   BlockType.None     *#0589#    
    BATT_TEST                  51122348     BlockType.Always   *#2*#      
    GPS_TEST                   1814073437   BlockType.None     *#771280*67
    BATTERYINFO                4130563292   BlockType.Always   *#0228#    
    DEVICETEST                 4130780894   BlockType.Always   *#0842#    
    RTC                        4130749313   BlockType.None     *#0782#    
    AUDIOTEST                  4130712320   BlockType.None     *#0673#    
    AUDIOTEST2                 4130569859   BlockType.None     *#0289#    
    ILLUMINATIONTEST           4130780927   BlockType.None     *#0843#    
    PHONELOOPBACKTEST          4130569661   BlockType.Always   *#0283#    
    USBPATHCHANGE              4138871141   BlockType.Always   *#7284#    
    BLUETOOTH_MAC_VIEWER       3974576996   BlockType.Always   *#232337#  
    BLUETOOTH_RF_TEST          3974576798   BlockType.Always   *#232331#  
    BLUETOOTH_AUDIO_TEST       3974576831   BlockType.None     *#232332#  
    BLUETOOTH_SEARCH_TEST      3974576864   BlockType.None     *#232333#  
    WIFI_MAC_VIEWER            3974577029   BlockType.Always   *#232338#  
    WIFI_TEST                  3974577062   BlockType.None     *#232339#  
    WIFI_FACTORY_TEST          1687154669   BlockType.None     *#526#     
    NFC                        993032389    BlockType.Always   *#6328378# 
    AUDIOCODEC                 2418895042   BlockType.None                
    AUDIOGAINCONTROL           2418895075   BlockType.None                
    FMRADIORX                  4130603585   BlockType.None     *#0368#    
    FMRADIORX_COMMON           4134271370   BlockType.None     *#3689#    
    MICROUSB_TEST              4131936356   BlockType.None     *#1793#    
    LCDTEST                    51120170     BlockType.Always   *#0*#      
    TouchFirmare_2663          4133083073   BlockType.Always   *#2663#    
    TouchDelta_80              51129080     BlockType.None     *#80#      
    BT_LogDisable              362345438    BlockType.None     *#9902*0#  
    BT_LogEnable               362345471    BlockType.None     *#9902*1#  
    BT_SSPDEbugModeEnable      362345504    BlockType.None     *#9902*2#  
    BT_SSPDEbugModeDisable     362345537    BlockType.None     *#9902*3#  
    PowerOffSetting            4138980041   BlockType.None     *#7594#    
    TouchkeySensitivity        3482638972   BlockType.Always   *#86824#   
    ProximityTest              4139048813   BlockType.Always   *#7769#    
    LCDDimmingTestLoop         68478722     BlockType.None     *#5235667# 
    CompassLog                 513825771    BlockType.None     *#624564#  
    EnableNever                3400811611   BlockType.None     *#63837#   
    TouchSpecVerifier          4189735160   BlockType.None                
    APPSLAUNCHER               54201206     BlockType.None     *#914789#  
    NetworkSettingInfo         4141487876   BlockType.Always   *#9920#    
    ConnProflieSetting         4141485962   BlockType.Always   *#9908#    
    RUNAPP                     2042365872   BlockType.None     *#786227#  
    IPSetting                  3974577854   BlockType.Always   *#232340#  
    CDMATEST                   1695532268   BlockType.None     *#455037698
    CDMATEST                   1695534446   BlockType.None     *#455037898
    DMGCF                      3207361684   BlockType.None     *#15428#   
    DataScreen                 2764154383   BlockType.None                
    CDMA_LTE_NETTYPE           51377652     BlockType.None     *#45503589 
    TESTMODE                   2315889864   BlockType.None                
    SWversionFTA               4141495796   BlockType.Always   *#9999#    
    HWversionFTA               4140272816   BlockType.Always   *#8888#    
    SWversionFTA               4131711956   BlockType.Always   *#1111#    
    HWversionFTA               4132934936   BlockType.Always   *#2222#    
    DEBUGMODE1                 4130490098   BlockType.Always   *#0011#    
    CIPHERING                  3282081274   BlockType.None     *#32489#   
    INTEGRITY                  4133049215   BlockType.None     *#2580#    
    UARTCHANGER                4141172066   BlockType.None     *#9090#    
    RRCVERSION                 4130678759   BlockType.None     *#0599#    
    GPSTEST                    4131862370   BlockType.None     *#1575#    
    BANDSELECTION              4132939325   BlockType.None     *#2263#    
    GCFTESTMODE_ENTER          403159779    BlockType.None     *#4238378# 
    ReactivateSellOutSMS       2155722335   BlockType.None     *#509733**#
    DisableSellOutSMS          2419357615   BlockType.None     *#999001**2
    SellOutSMSTestMode         2531766893   BlockType.None                
    SellOutSMSProductionMode   2530723466   BlockType.None     *#561277575
    SellOutSMS                 3494684894   BlockType.None     *#1784229*6
    POWERONATTACH              4138872362   BlockType.None     *#7298#    
    OperatorDebug              1067070358   BlockType.None     *#37375625#
    AutoReceive_Enable         4012662285   BlockType.None     *#4505**554
    AutoReceive_Disable        3568836989   BlockType.None                
    CollectLog                 3525042124   BlockType.None     *#9900*#   
    RetailLog                  4141485698   BlockType.Always   *#9900#    
    DEBUGDUMP                  4130669882   BlockType.None     *#0514#    
    RILDUMP                    1687228688   BlockType.Always   *#745#     
    LOCK_STATUS_INFO           2106356451   BlockType.None     *#7465625# 
    EN_LOCK_NW                 3153231157   BlockType.None     *#303176*91
    DIS_LOCK_NW                489744846    BlockType.None                
    EN_LOCK_SUB_NW             3154590229   BlockType.None     *#13061*685
    DIS_LOCK_SUB_NW            491103918    BlockType.None                
    EN_LOCK_SVC                4130258530   BlockType.None     *#362077129
    DIS_LOCK_SVC               3398794203   BlockType.None     *#446255022
    EN_LOCK_CORP               4130078845   BlockType.None     *#362072129
    DIS_LOCK_CORP              3398614518   BlockType.None     *#446250022
    VERIFYCOMPARE              4141495499   BlockType.Always   *#9990#    
    IMEI_NUMBER                51120566     BlockType.Always   *#06#      
    RESET_FACTORY              2002483970   BlockType.None     *#951001849
    HIDDEN_TEST                1468447360   BlockType.None     *#2106*41*1
    HIDDEN_TEST_RTNMenu        1413285326   BlockType.None                
    DNS_DISABLE                3737272694   BlockType.None                
    HIDDEN_TEST                2722728366   BlockType.None                
    HIDDEN_TEST                4134127391   BlockType.None     *#3282#    
    HIDDEN_TEST                651520162    BlockType.None     *#3214789# 
    HIDDEN_TEST                3682702876   BlockType.None                
    HIDDEN_TEST                113137464    BlockType.None     *#7597308**
    HIDDEN_TEST                3683786200   BlockType.None     *#70*297080
    HIDDEN_TEST                324852231    BlockType.None                
    HIDDEN_TEST                3109716334   BlockType.None                
    HIDDEN_TEST                119210817    BlockType.None     *#7597848**
    HIDDEN_TEST                1270103692   BlockType.None                
    HIDDEN_TEST                1413321362   BlockType.None                
    Rebooting                  1462373143   BlockType.None                
    SAR                        51120599     BlockType.Always   *#07#
    (Where is the Samsung ATIV S specific forum? >_<)
    Here are some codes for ATIV S, these are intended to be inserted in the Diagnostic Dialer
    IMEI Number Prompt: *#06#
    Screen and vibration test menu: *#0*#
    Battery test menu: *#0228#
    Firmware version prompt: *#1234#
    FTA SW Version menu: *#1111#
    FTA HW Version menu: *#2222#
    FTA HW Version menu: *#8888#
    FTA SW Version menu: *#9999#
    Basic information Testmode menu: *#0011#
    Vibrations test menu: *#0842#
    Bluetooth MAC Address prompt: *#232337#
    I don't know what the FTA menus are for, but they look dangerous (and potentially useful).
    Hidden Test Menu
    When you install diagnosis app via ##634# code and you type 3 digits starting with 15 (last digit doesn't matter) you will have access to a hidden test menu... For example we can view the Samsung ROM version (mine is I8750XXAMC1)
    Unfortunately I can't take a screenshot while viewing that menu. I hope someone will make something useful from this info :)
    Extra Hidden Menu
    Launch the diagnostic dialer as usual.
    2nd open up:
    FTA SW Version menu: *#9999#
    3rd: TYPE THE FOLLOWING VERY QUICKLY! If you do this slow, nothing happens!!!
    *#0
    you will see the following menu
    please be careful!!!!
    Micro USB Menu (USB Path Control): *#7284#
    I think it's old, but if you enter a test menu (for example using *#2222#) you can reach the 'root' by pressing the 'back' buttons multiple times and then you can navigate the tree as you like.
    attachment.php
    attachment.php
    on Samsung Micro USB test has 3 Options :

    zune sync
    modem, tethered Call
    modem, usb diag

    USB TETHERING:

    Playing along with the phone, I've noticed that typing ##778# into the phone's dialer also launches the Diagnosis menu(Odyssey_121205). Don't know if it's old news but I wanted to spread the info. My phone is an ATIV S - I8750, unbranded. I'm currently on Orange Romania network but the phone works on any networks. My current CSC is ATO. I left it this way because there is no CSC for Romania in the menu(not even the OXX type). Running the last GDR3 update.
    HTC Devices
    HTC 8X
    When I enter any of those commands, I get the HTC Function Test v1.01.01g (flashlight, LED & vibrator test).
    After running the commands, theres an update for the CSDDiag tool (from HTC v1.1.23311.13243) which is now visible in the apps list. It contains a full of diag tools:
    Backlight, Vibrator, LED, Button, Linedraw, Flashlight, Charger, gsensor, Audio, Mic, Headset, Camera, Bluetooth, WiFi, Battery, GPS, LiveCall (receiver,psensor), LightSensor, and NFC test menus.
    Also contains device info, and factory reset.

    On the HTC 8x, you can launch a "hidden" APN settings page using the following URI [using cpuguy's Native Toast Notification Launcher] : app://5edbdbbc-2ab2-df11-8a2f-00237de2db9e/_default#/View/APNSettingPage.xaml

    Unfortunately, the "ok" button is disabled when this page is directly invoked. If someone can figure out the right carrier to pick on the main page of the HTC Connection Setup xap, it will pop this page with an active "ok" button.

    HTC 8S
    thals1992 said:
    ##DIAG# launches CSDiag, but it takes a while to load. There were only three items shown inside, I think I had the same results as @timmymarsh, before he updated with flashlight, LED, and Vibrator as the only commands listed. I only had one of these in my hands for 40 seconds at a Cincinnati Bell store, so I couldn't update the app.

    HTC 8XT
    I hit up a local Sprint Reseller, to see if they had a demo Windows Phone device. They didn't have one there, so with my haggling I got them to unbox one, while I got to test out dial strings. I made a YouTube video that only 5 minutes long that includes a few things I got to test before I left. I might just pay them $50 to play with it for 14 days to return it. (I have no intention of actually paying for a cell plan that I don't need. )
    ##DIAG# launches CSDiag. (delayed as usual)
    ##PST# launches the EPST menu. It was more complicated and had wayyyy more features than I could figure out in the few minutes I had.
    ##MFG# launches "field test"
    ##DATA# works too.
    EDIT: I have been notified that either "111111" works or "sprint" works for the EPST and others in that same menu.
    I've done more research. You can find the link in my signature at the bottom of this post.

    HTC One M8 w/ Windows
    ##DIAG# launches HTC Function Test (CSDiag 1.01.01g)
    ##DATA# launches Service Tools (same as clicking on the app - generic info)
    ##PST# launches Service Tools (DiagnosticTool)
    ##786# does too....
    ##522# and ##552+call launches then crashes....
    ##MFG# launches EmbeddedTool (DiagnosticTool)
    Huawei Devices
    Huawei Ascend W1
    Diagnostics: ##2846579#





    Huawei Ascend W2
    [##2846579#] works for the Huawei Ascend W2, too. :good:


    Inaccessible Apps and Pages - (Only pages that work...)
    @cpuguy's Native Toast Notification Launcher can launch any any app and any page that's inside if it.

    Enter inside the text-box, the app-id, the handle, the app's file, ect.
    Nokia extras+info
    Code:
    app://2377fe1b-c10f-47da-92f3-fc517345a3c0/_default#/Launcher;component/MainPage.xaml?DialString=7820
    The string above launches extras+info and is launching the dial code for ##7820#. Notice no pound signs were used in the string.
    Here's a short list of dial codes that can be launched from it.
    The dialer codes for Nokia's at the top can also be used.
    Code:
    3282
    - field test (from my L928)
    wp_ss_20130808_0001.jpgwp_ss_20130808_0005.jpgwp_ss_20130808_0002.jpgwp_ss_20130808_0004.jpgwp_ss_20130808_0003.jpg
    Code:
    7820
    - sim lock page
    wp_ss_20130808_0008.jpgView attachment 2526208

    Diagnosis for the Samsung ATIV S, ATIV S Neo, and Odyssey
    Code for ATIV S (Tested v1.6.0.5):
    Code:
    app://07a20ad9-a4f9-4de3-855f-dcda8c8cab39/_default#/WP8Diag;component/
    Code for ATIV S NEO (Tested v1.0.0.8):
    Code:
    app://9dd0fa43-a6aa-4f82-b292-53e8e943a5b7/_default#/WP8Diag;component/
    Code for ATIV Odyssey (Tested v1.0.0.8):
    Code:
    app://51d4668e-01fa-4b6f-a8af-5170b5d7484c/_default#/WP8Diag;component/
    EDIT: See the attached files for the back half of the strings. I've hit the 30,000 character limit, and with these strings they are ~33,000.

    We still need your help!

    This wouldn't be here if it weren't other members contributing, so please keep reporting in! We are still missing codes from ALL Windows Phone 8.1 devices. I really don't need Lumia's anymore. They all pretty much share all the same dial codes from 8 to 8.1 Cyan. The only thing that might vary, is some of the codes will be disabled on some devices, whereas others will work.
    GO TO WIKIPEDIA TO FIND YOUR MODEL.
    5
    On Ativ S 8.1.1 :
    attachment.php
    attachment.php
    attachment.php
    attachment.php
    attachment.php
    attachment.php
    attachment.php
    attachment.php
    attachment.php
    attachment.php
    attachment.php
    attachment.php
    attachment.php
    attachment.php
    attachment.php
    attachment.php
    attachment.php
    attachment.php
    attachment.php
    3
    When i enter any of those commands, i get the HTC function test v1.01.01g (flashlight, LED & vibrator test).

    HTC8x.

    EDIT: Interesting, after running the commands, i now received an update for the CSDDiag tool (from HTC v1.1.23311.13243) which is now visible in the apps list. It contains a full set of diag tools:
    • backlight test
    • vibrator test
    • led test
    • button test
    • linedraw test
    • flashlight test
    • charger test
    • gsensor test
    • audio test
    • mic test
    • headset test
    • camera test
    • bluetooth test
    • wifi test
    • battery test
    • device info
    • factory rest
    • gps test
    • livecall test (receiver,psensor)
    • lightsensor test
    • nfc test

    Will have to play around with this for a while to see what they all do.
    3
    On the HTC 8x, you can launch a "hidden" APN settings page using the following URI: app://5edbdbbc-2ab2-df11-8a2f-00237de2db9e/_default#/View/APNSettingPage.xaml

    Unfortunately, the "ok" button is disabled when this page is directly invoked. If someone can figure out the right carrier to pick on the main page of the HTC Connection Setup xap, it will pop this page with an active "ok" button.

    Code:
     public static bool IsPopAPNSetting(COperatorItemCollection cOperatorItemCollection, string strDisplayName)
        {
          HTCDebug.LogReg("[IsPopAPNSetting]+", new object[0]);
          bool flag = false;
          try
          {
            string str1 = string.Empty;
            if (cOperatorItemCollection != null && 0 < cOperatorItemCollection.Count)
            {
              foreach (COperatorItem coperatorItem in (List<COperatorItem>) cOperatorItemCollection)
              {
                if (coperatorItem.DisplayName == strDisplayName)
                {
                  string str2 = string.Empty;
                  string str3;
                  if (CustomizationHelper.IsReadBranchDatabase())
                  {
                    str3 = "c:\\programs\\commonfiles\\adc\\MNS_Conn_" + coperatorItem.FolderName + "_branch.dbz";
                    if (!FileAccessHelper.IsFileExist(str3))
                      str3 = "c:\\programs\\commonfiles\\adc\\MNS_Conn_" + coperatorItem.FolderName + ".dbz";
                  }
                  else
                    str3 = "c:\\programs\\commonfiles\\adc\\MNS_Conn_" + coperatorItem.FolderName + ".dbz";
                  string strXmlIn = FileAccessHelper.ReadZipFileAsXMLString(str3, "Conn_UserData.provxml");
                  if (string.Empty != strXmlIn)
                  {
                    flag = true;
                    HTCDebug.LogReg("[IsPopAPNSetting]: bRet = {0}", new object[1]
                    {
                      (object) (bool) (flag ? 1 : 0)
                    });
                    CustomizationHelper.SetAPNSettingPageInputOKFlag(strXmlIn);
                    break;
                  }
                  else
                    break;
                }
              }
            }
            else
              HTCDebug.LogReg("[IsPopAPNSetting]: cOperatorItemCollection is null  or have no item", new object[0]);
          }
          catch (Exception ex)
          {
            HTCDebug.LogReg("[IsPopAPNSetting]Msg: {0}", new object[1]
            {
              (object) ex.Message
            });
            HTCDebug.LogReg("[IsPopAPNSetting]Exception: {0}", new object[1]
            {
              (object) ex.ToString()
            });
          }
          HTCDebug.LogReg("[IsPopAPNSetting]-", new object[0]);
          return flag;
        }
    2
    OK, finally started reverse engineering the Diagnosis app on ATIV S.

    The good news: the hash function is really easy to reverse. Many of the hashes take under a second. Some others... not so much, but I could (and probably should) multi-thread the brute forcing code.

    The hopeful news: there are a *ton* of useful functions hidden away in there, including registry reads and writes.

    The disappointing news: many of the most interesting features are disabled on my phone until or unless I can change some configuration... stuff. I'm not sure what the stuff in question is, though (one option involves the USB port, but I don't know much more). This needs more investigation.

    There are other apps that I haven't looked at yet, too.
Our Apps
Get our official app!
The best way to access XDA on your phone
Nav Gestures
Add swipe gestures to any Android
One Handed Mode
Eases uses one hand with your phone