MMI codes for the TMO T989 - T-Mobile Samsung Galaxy S II SGH-T989

Anyone have a good list of MMI codes for the TMO T989?
Device: Samsung Tmobile S2 [SGH-T989]
ROM: BlackEdition R7 ICS Rom
Radio: Blaze 4g ICS Radio
Tweak Script: Newest Supercharger V6 ICS with modified services.jar, KAK, 3G Turbocharger

Did you try that thing called Google?

xsteven77x said:
Did you try that thing called Google?
Click to expand...
Click to collapse
Google? What's that? Btw yes I have the results are some codes here some codes there. I was looking for a good list of all or atleast many in one area.
Device: Samsung Tmobile S2 [SGH-T989]
ROM: BlackEdition R7 ICS Rom
Radio: Blaze 4G ICS Radio
Tweak Script: Newest Supercharger V6 ICS with modified services.jar, KAK, 3G Turbocharger

Samsung Mobile Codes. - - - Global Codes.
*#1234# = Firmware Version.
*#2222# = H/W Version.
*#8999*8376263# = All Versions Together.
*#8999*8378# = Test Menu.
*#4777*8665# = GPSR Tool.
*#8999*523# = LCD Brightness.
*#8999*377# = Error Menu.
*#8999*327# = EEP Menu.
*#8999*667# = Debug Mode.
*#92782# = PhoneModel. (Wap)
#*5737425# = JAVA Mode.
*#2255# = Call List.
*#232337# = Bluetooth MAC Adress.
*#5282837# = Java Version.
#*4773# = Incremental Redundancy.
#*7752# = 8 PSK uplink capability bit.
#*7785# = Reset wakeup & RTK timer cariables/variables.
#*7200# = Tone Generator Mute.
#*3888# = BLUETOOTH Test mode.
#*7828# = Task screen.
#*#8377466# = S/W Version & H/W Version.
#*2562# = Restarts Phone.
#*2565# = No Blocking? General Defense.
#*3353# = General Defense, Code Erased.
#*3837# = Phone Hangs on White screen.
#*3849# = Restarts Phone.
#*3851# = Restarts Phone.
#*3876# = Restarts Phone.
#*7222# = Operation Typ: (Class C GSM)
#*7224# = !!! ERROR !!!
#*7252# = Operation Typ: (Class B GPRS)
#*7271# = CMD: (Not Available)
#*7274# = CMD: (Not Available)
#*7337# = Restarts Phone. (Resets Wap Settings)
#*2787# = CRTP ON/OFF.
#*2886# = AutoAnswer ON/OFF.
#*3737# = L1 AFC.
#*5133# = L1 HO Data.
#*7288# = GPRS Detached/Attached.
#*7287# = GPRS Attached.
#*7666# = White Screen.
#*7693# = Sleep Deactivate/Activate.
#*7284# = L1 HO Data.
#*2256# = Calibration info? (For CMD set DEBUGAUTONOMY in cihard.opt)
#*2286# = Databattery.
#*2527# = GPRS switching set to (Class 4, 8, 9, 10)
#*2679# = Copycat feature Activa/Deactivate.
#*3940# = External looptest 9600 bps.
#*4263# = Handsfree mode Activate/Deactivate.
#*4700# = Please use function 2637.
#*7352# = BVMC Reg value (LOW_SWTOFF, NOMINAL_SWTOFF)
#*2558# = Time ON.
#*3370# = Same as 4700.
#*3941# = External looptest 115200 bps
#*5176# = L1 Sleep.
#*7462# = SIM Phase.
#*7983# = Voltage/Freq.
#*7986# = Voltage.
#*8466# = Old Time.
#*2255# = Call Failed.
#*5187# = L1C2G trace Activate/Deactivate.
#*5376# = DELETE ALL SMS!!!!.
#*6837# = Official Software Version: (0003000016000702)
#*7524# = KCGPRS: (FF FF FF FF FF FF FF FF 07)
#*7562# = LOCI GPRS: (FF FF FF FF FF FF FF FF FF FF FF FE FF 01)
#*2337# = Permanent Registration Beep.
#*2474# = Charging Duration.
#*2834# = Audio Path. (Handsfree)
#*3270# = DCS Support Activate/Deactivate.
#*3282# = Data Activate/Deactivate.
#*3476# = EGSM Activate/Deactivate.
#*3676# = FORMAT FLASH VOLUME!!!
#*4760# = GSM Activate/Deactivate.
#*4864# = White Screen.
#*5171# = L1P1.
#*5172# = L1P2.
#*5173# = L1P3.
#*7326# = Accessory.
#*7683# = Sleep variable.
#*8465# = Time in L1.
#*2252# = Current CAL.
#*2836# = AVDDSS Management Activate/Deactivate.
#*3877# = Dump of SPY trace.
#*7728# = RSAV.
#*2677# = Same as 4700.
#*3728# = Time 2 Decod.
#*3725# = B4 last off.
#*7372# = Resetting the time to DPB variables.
#*7732# = Packet flow context bit Activate/Deactivate.
#*6833# = New uplink establishment Activate/Deactivate.
#*3273# = EGPRS multislot. (Class 4, 8, 9, 10)
#*7722# = RLC bitmap compression Activate/Deactivate.
#*2351# = Blinks 1347E201 in RED.
#*4472# = Hysteresis of serving cell: 3 dB
#*2775# = Switch to 2 inner speaker.
#*9270# = Force WBS.
#*7878# = FirstStartup. (0=NO, 1=YES)
#*3757# = DSL UART speed set to. (LOW, HIGH)
#*8726# = Switches USBACM to Normal.
#*8724# = Switches USBACM to Generator mode.
#*8727# = Switches USBACM to Slink mode.
#*8725# = Switches USBACM to Loop-back mode.
#*3838# = Blinks 3D030300 in RED.
#*2077# = GPRS Switch.
#*2027# = GPRS Switch.
#*0227# = GPRS Switch.
#*0277# = GPRS Switch.
#*8370# = Tfs4.0 Test 0.
#*8371# = Tfs4.0 Test 1.
#*8372# = Tfs4.0 Test 2.
#*8373# = Tfs4.0 Test 3.
#*8374# = Tfs4.0 Test 4.
#*8375# = Tfs4.0 Test 5.
#*8376# = Tfs4.0 Test 6.
#*8377# = Tfs4.0 Test 7.
#*8378# = Tfs4.0 Test 8.
#*8379# = Tfs4.0 Test 9.
#*7878# = FirstStartup. (0=NO, 1=YES)
#*3838# = Blinks 3D030300 in RED.
#*2077# = GPRS Switch.
#*2027# = GPRS Switch.
#*0227# = GPRS Switch.
#*0277# = GPRS Switch.
#*22671# = AMR REC START.
#*22672# = Stop AMR REC. (File name: /a/multimedia/sounds/voice list/ENGMODE.amr)
#*22673# = Pause REC.
#*22674# = Resume REC.
#*22675# = AMR Playback.
#*22676# = AMR Stop Play.
#*22677# = Pause Play.
#*22678# = Resume Play.
#*77261# = PCM Rec Req.
#*77262# = Stop PCM Rec.
#*77263# = PCM Playback.
#*77264# = PCM Stop Play.
#*22679# = AMR Get Time.
*#8999*364# = Watchdog ON/OFF.
*#8999*427# = WATCHDOG signal route setup.
*2767*226372# = Camera Reset. (deletes photos)
*2767*3855# = E2P Full Reset.
*2767*2878# = E2P Custom Reset.
*2767*927# = E2P Wap Reset.
*2767*226372# = E2P Camera Reset.
*2767*688# = Reset Mobile TV.
#7263867# = RAM Dump. (On or Off)
samsung mobile code. - - - wap / mms code.
*2767*43927# = Austria WAP Settings.
*2767*420927# = Czech WAP Settings.
*2767*33927# = France WAP Settings.
*2767*49927# = Germany WAP Settings.
*2767*30927# = Greece WAP Settings.
*2767*39927# = Italy WAP Settings.
*2767*31927# = Netherlands WAP Settings.
*2767*351927# = Portugal WAP Settings.
*2767*7927# = Russia WAP Settings.
*2767*34927# = Spain WAP Settings.
*2767*46927# = Sweden WAP Settings.
*2767*44927# = UK WAP Settings.
*2767*380927# = Ukraine WAP Settings.
*2767*73738927# = WAP Settings Reset.
*2767*43667# = Austria MMS Settings.
*2767*420667# = Czech MMS Settings.
*2767*33667# = France MMS Settings.
*2767*49667# = Germany MMS Settings.
*2767*30667# = Greece MMS Settings.
*2767*39667# = Italy MMS Settings.
*2767*31667# = Netherlands MMS Settings.
*2767*351667# = Portugal MMS Settings.
*2767*7667# = Russia MMS Settings.
*2767*34667# = Spain MMS Settings.
*2767*46667# = Sweden MMS Settings.
*2767*44667# = UK MMS Settings.
*2767*380667# = Ukraine MMS Settings.
samsung mobile code. - - - email code.
#*36245# Turns Email TestMenu on.
*2767*22236245# Email EPP set (....)!
*2767*837836245# Email Test Account!
*2767*29536245# Email Test2 Account!
*2767*036245# Email EPP reset!
*2767*136245# Email EPP set (1)!
*2767*736245# Email EPP set (7)!
*2767*3036245# Email...
*2767*3136245# Email...
*2767*3336245# Email...
*2767*3436245# Email...
*2767*3936245# Email...
*2767*4136245# Email...
*2767*4336245# Email...
*2767*4436245# Email...
*2767*4536245# Email...
*2767*4636245# Email...
*2767*4936245# Email...
*2767*6036245# Email...
*2767*6136245# Email...
*2767*6236245# Email...
*2767*6336245# Email...
*2767*6536245# Email...
*2767*6636245# Email...
*2767*8636245# Email...
*2767*85236245# Email...
samsung mobile code. - - - lock code.
*#7465625# = Check the locks.
*7465625*638*Code# = Enables Network lock.
#7465625*638*Code# = Disables Network lock.
*7465625*782*Code# = Enables Subset lock.
#7465625*782*Code# = Disables Subset lock.
*7465625*77*Code# = Enables SP lock.
#7465625*77*Code# = Disables SP lock.
*7465625*27*Code# = Enables CP lock.
#7465625*27*Code# = Disables CP lock.
*7465625*746*Code# = Enables SIM lock.
#7465625*746*Code# = Disables SIM lock.
*7465625*228# = Activa lock ON.
#7465625*228# = Activa lock OFF.
*7465625*28638# = Auto Network lock ON.
#7465625*28638# = Auto Network lock OFF.
*7465625*28782# = Auto subset lock ON.
#7465625*28782# = Auto subset lock OFF.
*7465625*2877# = Auto SP lock ON.
#7465625*2877# = Auto SP lock OFF.
*7465625*2827# = Auto CP lock ON.
#7465625*2827# = Auto CP lock OFF.
*7465625*28746# = Auto SIM lock ON.
#7465625*28746# = Auto SIM lock OFF.
samsung mobile code. - - - sound code.
Samsung phones.
Dial *#6984125*#
Test menu dial *#9072641*# (You need this one i think.)
Click 5 Audio - 2 AP volume config
Now you see zie je 4 things:
1 RCV config
2 EAR config
3 SPK config
4 BTH config
Now you see this:
1 MP volume
2 Keytone volume
3 Ringtone volume
4 Rec volume
5 FM radio volume
6 Camera volume
7 Voice call volume
8 Vt call volume
9 Voice memo volume
( SPK = Speaker )( Ear = Headset )
Tune Headset volume:
*#9072641*# - 2 EAR config - 3 Ringtone volume - Stap 6 tune it to 10
Tune movie volume:
*#9072641*# - 3 SPK config - 3 Ringtone volume - Stap 6 tune it to 10
Note it works but don't forget to type somewhere your old settings.
And These:
* # * # 4636 # * # * Details of your battery: - Phone Information - Battery Information - Battery History - Usage Statistics
* # * # 7780 # * # * This code is to do a factory reset .
Delete the following: - The settings of your Google account on the phone - system settings and applications - Applications you download to SD (downloaded, not installed) does not delete: - The software and applications you have installed - Files the SD.
* 2767 * 3855 # Warning: This code will make us a full factory reset (wipe total). Deleting all files in internal memory and reinstall the firmware.
* # * # 34971539 # * # * About your camera. - Update the camera firmware (Do not take this option) - Update the camera firmware in the SD - Release the camera firmware
* # * # 7594 # * # * This code directly off your phone, without going through the menu.
* # * # 273283 * 255 * 663 282 * # * # * It opens a screen that lets you copy your media.
* # * # 197328640 # * # * To access the service mode (used for deiferentes tests) and use the following code * # * # 232339 # * # * Or * # * # 526 # * # * O * # * # 528 # * # * - WLAN test * # * # 232338 # * # * - Show the current MAC address * # * # 1472365 # * # * - GPS test * # * # 1575 # * # * - Other GPS test * # * # 232331 # * # * - Bluetooth Test * # * # 232337 # * # - Displays the Bluetooth terminal address * # * # 8255 # * # * You open the monitor Gtalk. Codes Firmware for information: * # * # 4986 * 2650468 # * # * - PDA, Phone, H / W, RFCallDate * # * # 1234 # * # * - PDA and Phone * # * # 1111 # * # * - FTA SW Version * # * # * # * 2222 # - FTA HW Version * # * # * # * 44336 # - PDA, Phone, CSC, Build Time, changelist number codes to run different tests at the factory: * # * # 0283 # * # * - Packet Loopback * # * # 0 * # * # * - LCD Test * # * # 0673 # * # * O * # * # 0289 # * # * - Melody test * # * # 0842 # * # * - Device test (Vibration test and BackLight test) * # * # 2663 # * # * - Touch screen version * # * # 2664 # * # * - Touch screen test * # * # 0588 # * # * - Proximity sensor test * # * # 3264 # * # * - RAM version

Where in the heck did you find that listing. That's a hella list than the one I got.
Device: Samsung Tmobile S2 [SGH-T989]
ROM: BlackEdition R7 ICS Rom
Radio: Blaze 4G ICS Radio
Tweak Script: Newest Supercharger V6 ICS with modified services.jar, KAK, 3G Turbocharger

To choose specific network band
*#2263#

falcon67 said:
To choose specific network band
*#2263#
Click to expand...
Click to collapse
Yeah. I've played with that one alot in different areas where 3G is faster than HSPA in some area that im in.
Device: Samsung Tmobile S2 [SGH-T989]
ROM: BlackEdition R7 ICS Rom
Radio: Blaze 4G ICS Radio
Tweak Script: Newest Supercharger V6 ICS with modified services.jar, KAK, 3G Turbocharger

falcon67 said:
To choose specific network band
*#2263#
Click to expand...
Click to collapse
easy way to remember is *#band#

DriftorX said:
Where in the heck did you find that listing. That's a hella list than the one I got.
Device: Samsung Tmobile S2 [SGH-T989]
ROM: BlackEdition R7 ICS Rom
Radio: Blaze 4G ICS Radio
Tweak Script: Newest Supercharger V6 ICS with modified services.jar, KAK, 3G Turbocharger
Click to expand...
Click to collapse
You're welcome....

I tried out the "band" code yesterday, but I was unsure as to what the choices meant...Can someone explain what each choice means? thanks

Thanks for this complete list of codes. Really handy!
Sent from Jelly Bean'd T989 using Tapatalk 4 Beta 6.

dave2metz said:
I tried out the "band" code yesterday, but I was unsure as to what the choices meant...Can someone explain what each choice means? thanks
Click to expand...
Click to collapse
This code was working when I was on ICS. Now I'm on JB and this same dead end screen appears on my phone too.

Yes JB has borked the codes for me too...
Sent from Jelly Bean'd T989 using Tapatalk 4 Beta 6.

Related

Possibility to execute download mode programmatically on Omnia 7?

Us T-Mobile users cannot flash Roms at the minute because the download mode button combo has been disabled.
Maybe there is a way to do this programatically or use a resistor accross certain USB pins like the Galaxy S method.
What's your opinion on this?
Sent from my OMNIA7 using Board Express
Yesterday I wasted some time playing around with the USB diagnostic port (enable in the Diagnosis app, it's the third USB mode option). Both PSAS and QPST can connect to and mess with the phone, so I think if someone knows his way around, the phone can be kicked into Download Mode.
(I only managed to crash the phone in many different ways, but I was really just monkeying around.)
If this can be done it would be great as this is the first phone I have owned where I cannot flash firmware myself.
Might be worth while seeing if everyone with a tmobile uk branded omnia 7 has this issue?
FYI I have included my firmware versions etc so we can try and collate a list of working/non working ones to see what the differences are if any.
os version 7.0.7004.0
firmware revision number 2424.10.10.6
hardware revision number 3.15.0.4
radio software version 2424.10.10.6
radio hardware version 0.0.0.800
bootloader version 4.10.1.9
chip soc version 0.36.2.0
KarmaXXK said:
Yesterday I wasted some time playing around with the USB diagnostic port (enable in the Diagnosis app, it's the third USB mode option). Both PSAS and QPST can connect to and mess with the phone, so I think if someone knows his way around, the phone can be kicked into Download Mode.
(I only managed to crash the phone in many different ways, but I was really just monkeying around.)
Click to expand...
Click to collapse
Yes, I tried the *#7284# code and changed the USB Path Control to "Modem, USB Diag" and my phone was recognised by the ROM Downloader but the phone was not in download mode.
I have stumbled upon something which may be what we are looking for though, after reverse engineering the Samsung Diagnosis app I notice there are codes to access 'Operator Specific' Admin areas in the app. Take a look at the attached image.
Now as you can see, the values listed cannot be typed into the Diagnosis app as there is a formula to decipher them. I have the formula but cannot get it to work.
Code:
Private Overloads Function GetHashCode(ByVal str As String) As UInteger
Dim num As UInteger = 0
For i As Integer = 0 To str.Length - 1
[B]num = ((num << 5) + num) + str(i)[/B]
Next
Return num
End Function
Now the bit highlighted in bold is the bit I cant get to work.
It gives the following error:
Operator '+' is not defined for types 'UInteger' and 'Char'.
Once someone can help to get this working, reversing the formula should in theory show us the correct *#000# code combination for each area.
Fingers crossed you can crack it!
lyriquidperfection said:
Yes, I tried the *#7284# code and changed the USB Path Control to "Modem, USB Diag" and my phone was recognised by the ROM Downloader but the phone was not in download mode.
I have stumbled upon something which may be what we are looking for though, after reverse engineering the Samsung Diagnosis app I notice there are codes to access 'Operator Specific' Admin areas in the app. Take a look at the attached image.
Now as you can see, the values listed cannot be typed into the Diagnosis app as there is a formula to decipher them. I have the formula but cannot get it to work.
Code:
Private Overloads Function GetHashCode(ByVal str As String) As UInteger
Dim num As UInteger = 0
For i As Integer = 0 To str.Length - 1
[B]num = ((num << 5) + num) + str(i)[/B]
Next
Return num
End Function
Now the bit highlighted in bold is the bit I cant get to work.
It gives the following error:
Operator '+' is not defined for types 'UInteger' and 'Char'.
Once someone can help to get this working, reversing the formula should in theory show us the correct *#000# code combination for each area.
Click to expand...
Click to collapse
I worked on this few days ago, I couldn't reverse the hash function but we had some brilliant ideas how to do it (see the stackoverflow thread about it http://stackoverflow.com/questions/4523553/reversing-a-hash-function)
but I used brute force and extracted some 60 diagnosis codes that you can find here http://www.martani.net/2010/12/windows-7-hacks-all-diagnosis-codes-you.html
and here http://www.martani.net/2010/12/windows-7-hacks-all-diagnosis-codes-you_26.html
This is great stuff martani if there is any way to decipher these ones, they may be worth looking at:
g_ADMIN_GENERIC = 3370684588
g_ADMIN_TMOBILE = 469486183
g_ADMIN_VODAFONE = 474092301
These ones indeed look very interesting and may offer a way to enable ADC or even the Download Mode some people like me have been looking for.
lyriquidperfection said:
This is great stuff martani if there is any way to decipher these ones, they may be worth looking at:
g_ADMIN_GENERIC = 3370684588
g_ADMIN_TMOBILE = 469486183
g_ADMIN_VODAFONE = 474092301
These ones indeed look very interesting and may offer a way to enable ADC or even the Download Mode some people like me have been looking for.
Click to expand...
Click to collapse
Actually the code is a little misleading, if you see closely, the enum HashCodeTable is used nowhere.
The app waits for user input, after each "tap" on a number it calls the function ParseDial() that hashes the input with GetHashCode then calls the function GetEnumFromList() on this hashed value.
In GetEnumFromList, there is no use of HashCodeTable and even the codes you provided are not hard-coded in this function. I am not sure why they are there but as far as I can tell, to access these parts of the diagnosis app, you need another method than dialing a code it seems
martani said:
Actually the code is a little misleading, if you see closely, the enum HashCodeTable is used nowhere.
The app waits for user input, after each "tap" on a number it calls the function ParseDial() that hashes the input with GetHashCode then calls the function GetEnumFromList() on this hashed value.
In GetEnumFromList, there is no use of HashCodeTable and even the codes you provided are not hard-coded in this function. I am not sure why they are there but as far as I can tell, to access these parts of the diagnosis app, you need another method than dialing a code it seems
Click to expand...
Click to collapse
Damn it! Looks like we are back to square one!
Have you seen also on the Samsung Galaxy S the Download mode is disabled on some devices, but some users made a jig where you bridge 2 pins with a certain resistor and it knocks the phone into download mode. Maybe this would work on the Omnia 7 also????
I am hoping for a software based fix rather than hacking together something.
**ALL** diagnostic codes for SAMSUNG devices
I reverse engineered the Diagnostic Menu Application. It contains a list of configuration "Titles" with corresponding hash-codes. I made a tool to reverse the hash-codes to dial-codes. The dial-codes may not be the same as some codes that were already known, but the dial-codes are absolutely correct for these menu. Differences are due to hash-collisions (same hash-code may have multiple possible dial-codes). I just used the shortest dial-codes for every menu.
The list of menu's is very long and I discovered that not all menu-codes were not actually implemented. I guess this list of codes is used for all Samsung devices (possibly also for Galaxy S and older Windows Mobile devices). So not all dial-codes may actually work on your device.
WARNING!! The menu's can configure low-level settings of your phone. And if you don't know what you're doing you may brick your device or maybe hard-reset the device and loose all your data and settings. Or you may faulty calibrate your sensors. Be very, very careful with experimenting!! I will not take any responsibility for damaging your device in any way.
I would personally be very interested if anyone finds a way to get the device in download-mode by using these menu's (I have a bad bootloader which does not let my Samsung Omnia 7 go into download-mode to flash it to a newer firmware).
By the way: the admin menu's are NOT implemented on the Omnia 7 :-(
This is the list with menu-titles, dial-codes and their hashcode:
Code:
FTAMain = 15 (0x686)
QUALCOMM TEST = *09# (0x17DB96)
TMOServiceMenu = *74*# (0x31710C2)
SMDINFO = *#03# (0x30C0953)
SIMPLE FUNCTION TEST = *#05# (0x30C0995)
IMEI NUMBER = *#06# (0x30C09B6)
VIEWHISTORYNW = *#07# (0x30C09D7)
LCDTEST = *#0*# (0x30C082A)
QWERTYTEST = *#1*# (0x30C0C6B)
BATT TEST = *#2*# (0x30C10AC)
BRIGHTNESS TEST = *#3*# (0x30C14ED)
TouchDelta 80 = *#80# (0x30C2AF8)
LIGHTTEST = *#12*# (0x648DBCDD)
BTLOGDUMP = *#232# (0x648E4E87)
WIFI FACTORY TEST = *#526# (0x648FEFED)
RILNETLOG = *#638# (0x649080D1)
RILDUMP = *#745# (0x64911110)
VPHONE770 = *#770# (0x64911D2E)
VPHONE771 = *#771# (0x64911D4F)
VPHONE772 = *#772# (0x64911D70)
VPHONE773 = *#773# (0x64911D91)
VPHONE774 = *#774# (0x64911DB2)
VPHONE775 = *#775# (0x64911DD3)
VPHONE776 = *#776# (0x64911DF4)
VPHONE777 = *#777# (0x64911E15)
VPHONE778 = *#778# (0x64911E36)
VPHONE779 = *#779# (0x64911E57)
SR TEST = *#780# (0x6491216F)
VT DUMP = *#938# (0x649225F4)
Disable Testbed = #12358# (0xFC28BE89)
Enable Testbed = *12358# (0x170067D0)
DEBUGMODE1 = *#0011# (0xF63246F2)
BATTERYINFO = *#0228# (0xF63364DC)
PHONELOOPBACKTEST = *#0283# (0xF6337DBD)
AUDIOTEST2 = *#0289# (0xF6337E83)
FMRADIORX = *#0368# (0xF6340241)
LIGHTSENSORTEST = *#0589# (0xF63523A6)
RRCVERSION = *#0599# (0xF63527E7)
AUDIOTEST = *#0673# (0xF635AB00)
SOUNDTEST = *#0675# (0xF635AB42)
RTC = *#0782# (0xF6363B81)
DEVICETEST = *#0842# (0xF636B6DE)
ILLUMINATIONTEST = *#0843# (0xF636B6FF)
MultiTouch = *#0987# (0xF63754E8)
SWversionFTA = *#1111# (0xF644EBD4)
MOUSETEST = *#121*# (0xF645774E)
SWversionEx = *#1234# (0xF645811A)
MOUSECAL = *#123*# (0xF6457FD0)
MOUSECAL06 = *#126*# (0xF6458C93)
GPSTEST = *#1575# (0xF6473762)
MICROUSB TEST = *#1793# (0xF6485864)
HWversionFTA = *#2222# (0xF6579518)
BANDSELECTION = *#2263# (0xF657A63D)
PHONEDUMP = *#2454# (0xF658BADF)
CAMERAUPDATE = *#2470# (0xF658C2DD)
CAMERADISABLE = *#2480# (0xF658C71E)
NAVIKEY TEST = *#2486# (0xF658C7E4)
INTEGRITY = *#2580# (0xF659537F)
TouchFirmare 2663 = *#2663# (0xF659D7C1)
TouchDelta 2664 = *#2664# (0xF659D7E2)
TouchDelta 2665 = *#2665# (0xF659D803)
RILNETLOG OFF = *#6380# (0xF6A09CC1)
RILNETLOG ON = *#6381# (0xF6A09CE2)
NETLOCK NETWORK = *#6955# (0xF6A3DAE9)
USBPATHCHANGE = *#7284# (0xF6B22965)
POWERONATTACH = *#7298# (0xF6B22E2A)
SELF DIAGNOSTIC MODE = *#7353# (0xF6B2A8E2)
DebugOption = *#7450# (0xF6B334E0)
ERROR REPORT ON = *#7451# (0xF6B33501)
ERROR REPORT VERIFY = *#7452# (0xF6B33522)
NETLOCK SERVICE = *#7755# (0xF6B4DAA8)
VPHONE DISABLED = *#77*0# (0xF6B4AB38)
VPHONE ENABLED = *#77*1# (0xF6B4AB59)
UARTCHANGER = *#9090# (0xF6D54562)
DEBUGDUMP = *#9900# (0xF6DA0E82)
PILEDUMP = *#9901# (0xF6DA0EA3)
NETLOG LOG START = *#9905# (0xF6DA0F27)
DEBUG RIL DUMP = *#9906# (0xF6DA0F48)
ERRORREPCAB INSTALL = *#9907# (0xF6DA0F69)
GUMITEST3G CAB INSTALL = *#9908# (0xF6DA0F8A)
SUWON3G CAB INSTALL = *#9909# (0xF6DA0FAB)
UARTPATH = *#9910# (0xF6DA12C3)
BATTERYMONITOR = *#9911# (0xF6DA12E4)
CONNECTION SETTING = *#9920# (0xF6DA1704)
VERIFYCOMPARE = *#9990# (0xF6DA34CB)
YSSHINTEST = *#9999# (0xF6DA35F4)
VersionScript = 19104#2* (0xD21FC43E)
BLUETOOTH LOG DISABLE = 20652609 (0x1598F3DE)
BLUETOOTH LOG ENABLE = 20652619 (0x1598F3FF)
BT SSPDEbugModeEnable = 20652629 (0x1598F420)
BT SSPDEbugModeDisable = 20652639 (0x1598F441)
OMADMCLIENT LOG DISABLE = 20653609 (0x1599803F)
OMADMCLIENT LOG ENABLE = 20653619 (0x15998060)
CELOG LOG DISABLE = 20654609 (0x159A0CA0)
CELOG LOG ENABLE = 20654619 (0x159A0CC1)
TOTALCALLTIME = 2934331* (0xC35403F3)
RESET CUSTOM = 35180948 (0x77496B66)
RESET FACTORY = 35190718 (0x775B7B02)
ERASE IMEIITEM = 35190728 (0x775B7B23)
IMEI ADJUST = 35190738 (0x775B7B44)
BLUETOOTH RF TEST = 3##65*88 (0xECE73A9E)
BLUETOOTH AUDIO TEST = 3##65*98 (0xECE73ABF)
AutoSimSetting = 40*047#3 (0xD1C556DF)
PVKKey = 40*549#3 (0xD21FD9E6)
RESET FACTORY WITHDEFAULTLANGUAGE = 76264513 (0x777E1362)
NONSLEEPCALL OFF = *#069*0# (0xBCEBFF49)
NONSLEEPCALL ON = *#069*1# (0xBCEBFF6A)
LEDTEST = *#14789# (0xBF1C1ADD)
DMSessionInit = *#15428# (0xBF2C7494)
CIPHERING = *#32489# (0xC3A095FA)
CAMERAUPDATESVC = *#32589# (0xC3A1225B)
LOGDUMPMGR = *#33284# (0xC3B19514)
SR DISABLED = *#780*0# (0xCD5F5D49)
SR ENABLED = *#780*1# (0xCD5F5D6A)
NETLOCK SUBSET = *#78255# (0xCD60A57B)
LAUNCH UAEDIT = *#92782# (0xD1A12DFC)
PdaBuildTime = *#99820# (0xD2204C1C)
VersionTime = *#99821# (0xD2204C3D)
WIFI TEST = 0373385#6 (0xECE73BA6)
EN LOCK NW = 074578132 (0xBBF27D35)
GCFTESTMODE ENTER = 086#58023 (0x1807BAE3)
FILE SYSTEM TEST = 089559715 (0x28F3F681)
AUDIOGAINCONTROL = 08#766104 (0x902D68E3)
DIS LOCK SUB NW = 17#991#3* (0x1D45A6AE)
PVKFileName = 18*357#25 (0x161B193C)
EN LOCK SUB NW = 193582504 (0xBC073A15)
GPSTESTTOOL = 1#8865#55 (0xF61EC09C)
EN LOCK CORP = 1*0273411 (0xF62C007D)
EN LOCK SVC = 1*0278411 (0xF62EBE62)
DIS LOCK NW = 20789802* (0x1D30E9CE)
SellOutSMS = 2615#0922 (0xD04CA8DE)
TFlashUnPairing = 30334*733 (0x51B892C4)
DIS LOCK SVC = 38025*93# (0xCA957BDB)
GPSTESTTOOL2 = 400#40*08 (0xB9F6D60D)
GPSTESTXTRA = 400#40*18 (0xB9F6D62E)
SerialNumber = 5317*0648 (0x6E256D8C)
EN LOCK SIM = 5494585*3 (0xBC051995)
SERVERURL = 553378683 (0xD8389060)
SLIDECOUNT = 584644021 (0xF0BF3052)
SellOutSMSTestMode = 597#*224# (0x96E7B26D)
APPSLAUNCHER = 5**6244*3 (0x33B0B76)
SLOGSERIAL M2 = 66#6757#1 (0x7050E07C)
AutoReceive Enable = 7160*5088 (0xEF2C5E0D)
TESTMODE = 718071#49 (0x8A09ACC8)
RESET SERVICE = 72673#00# (0xEC5B4BEF)
ReactivateSellOutSMS = 74201#086 (0x807DB65F)
AUDIOCODEC = 7#16#1#37 (0x902D68C2)
ADMIN GENERIC = 838*5448* (0xC8E890AC)
SLOGSERIAL ALL ON = 8644*3081 (0x705107AC)
VT MANUALSETTING = 8802*7*5# (0x104384B5)
DISLOCK SIM = 98217*243 (0x1D43862E)
DMTESTMENU = 9#7357764 (0x414D9633)
SLOGSERIAL ALL OFF = #22#6214# (0x7050E03A)
SLOGSERIAL M1 = #22#6215# (0x7050E05B)
SLOGSERIAL M3 = #22#6217# (0x7050E09D)
SLOGSERIAL M4 = #22#6218# (0x7050E0BE)
SLOGSERIAL M5 = #22#6219# (0x7050E0DF)
ADMIN VODAFONE = #75471648 (0x1C42130D)
DisableSellOutSMS = *4587*676 (0x903477AF)
BLUETOOTH SEARCH TEST = *#232333# (0xECE73AE0)
RANDOM BT MAC = *#232336# (0xECE73B43)
BLUETOOTH MAC VIEWER = *#232337# (0xECE73B64)
WIFI MAC VIEWER = *#232338# (0xECE73B85)
PRECONFIGURATION = *#638738# (0x213EF313)
SELF DIAGNOSTIC MODE DISABLE = *#7353*0# (0x6E008D7C)
SLOGSERIAL M6 = *#745*06# (0x7050E100)
DIS LOCK CORP = 00*2*2#524 (0xCA92BDF6)
ADMIN TMOBILE = 0612824763 (0x1BFBCA67)
AutoReceive Disable = 09925572#3 (0xD4B8217D)
SWversionIn = 1309653522 (0xECB23FC4)
GPSTTFFTESTTOOL = 154*068271 (0xF61EBC7C)
SellOutSMSProductionMode = 1#3341#5#0 (0x96D7C68A)
LOCK STATUS INFO = 28##**23*0 (0x7D8C72E3)
SWversionNewIn = 32456464#7 (0xFD58D7FC)
Heathcliff74 said:
I reverse engineered the Diagnostic Menu Application. It contains a list of configuration "Titles" with corresponding hash-codes. I made a tool to reverse the hash-codes to dial-codes. The dial-codes may not be the same as some codes that were already known, but the dial-codes are absolutely correct for these menu. Differences are due to hash-collisions (same hash-code may have multiple possible dial-codes). I just used the shortest dial-codes for every menu.
Click to expand...
Click to collapse
Can you share how did you reverse the hash function? I worked on this some time ago but finally just brute forced it to extract the keys.
I would also like to know how he reversed the hash codes! I tried for hours and had no luck!
Haha.. Well, I first tried to calculate the original dial-codes, but that seems to work only for dialcodes shorter than 8 digits (5 bits per digit, 32 bits hash-code = 32 / 5 = 7 digits + 1 digit for the extra add):
Code:
uint hash = 0; // enter hash here
string DialCode = "";
while (hash > 0)
{
uint digit = (hash % 33) + 33;
if (digit > hash)
hash = 0;
else
hash = (hash - digit) / 33;
DialCode = Convert.ToChar(digit) + DialCode;
}
return DialCode;
But this does not work for long dial-codes. So after that I just made a little program to brute-force it. I copied the enum with menu-titles and hash-codes to my project. Then I used reflection to populate a sortedlist. Then I started to brute-force and check all dialcodes for their hashcode and see if it exists in the list. If it exists, I add it to a textbox and remove the item from the list. That's it. So it is not really reversed, but my program took about an hour to get dial-codes for all the hashcodes in the enum.
Code:
SortedList<uint, string> hashCodes = new SortedList<uint, string>();
int l = typeof(HashCodeTable).GetEnumNames().Length;
string[] menunames = typeof(HashCodeTable).GetEnumNames();
for (int i = 0; i < l; i++)
{
try
{
hashCodes.Add(Convert.ToUInt32(Enum.Parse(typeof(HashCodeTable), menunames[i])), menunames[i].Substring(2).Replace('_', ' '));
}
catch { }
}
char[] chars = { '0', '1', '2', '3', '4', '5', '6', '7', '8', '9', '#', '*' };
for (int length = 1; length <= 20; length++)
{
ushort[] digits = new ushort[length];
for (int i = 0; i < length; i++) digits[i] = 0;
while (true)
{
// calc hash
uint hashCode = 0;
for (int i = 0; i < length; i++)
{
hashCode = ((hashCode << 5) + hashCode) + chars[digits[i]];
}
if (hashCodes.ContainsKey(hashCode))
{
int m = hashCodes.IndexOfKey(hashCode);
string str = "";
for (int j = 0; j < length; j++)
str = str + chars[digits[j]];
textBox1.Text = textBox1.Text + hashCodes.Values[m] + " = " + str + " (0x" + hashCode.ToString("X") + ")" + Environment.NewLine;
hashCodes.RemoveAt(m);
}
// increase
digits[length - 1]++;
for (int k = length - 1; k >= 0; k--)
{
if (digits[k] >= 12)
{
if (k == 0)
break;
else
{
digits[k] -= 12;
digits[k - 1]++;
}
}
}
if ((digits[0] >= 12) || (hashCodes.Count == 0)) break;
}
if (hashCodes.Count == 0) break;
}
Excellent stuff! Thank you for this very interesting code snippit!
WP7 diag codes
martani said:
Actually the code is a little misleading, if you see closely, the enum HashCodeTable is used nowhere.
Click to expand...
Click to collapse
This is because the compiler optimized out the switch statement and compiled the constants into the IL code for the hash codes.
Within the main switch statement where keypad entries are evaluated there are ~112 codes and I've reversed all of them. Writing hash algorithms is not straightforward and it's quite a simple one, since my app captured 2-3-4 variants of keycodes for the same hash value.
Regarding the most interesting entries at the top of the enum the ADMIN_ entries...those hash values are not handled by the application, maybe Samsung has another diag app or a different app which is using the same method.
The other thing I can think of is there are APIs in the diag app which one is sending the hash of a keycode to the given driver...I tried that but the ADMIN stuff did not worked that way either :-((
If anyone is interested I can post the resolved codes, but not sure if I can post it in the forum or not ;-)
Regsitry entry to enable SLDR mode
I found this definition in B44C7A84-5068-4b43-A1E5-F870A80F6FF8.rgu:
[HKEY_LOCAL_MACHINE\Drivers\BuiltIn\UsbFn]
...
"OsMode"=dword:0 ; 0 for Main OS, 1 for SLDR
....
Is the download mode == SLDR mode?
Since maybe we can set this entry "somehow", and upon next reboot we will get into download mode so we can flash the device?
So the question is, what is SLDR mode? Secure Loader mode? I don't know this, a more pro in this area should help out ;-)
UPDATE
I was able to read the value (0) and write it back (0). Did not tried to write 1 there
Hey guys. I know this thread is about programmatically enter downloadmode, but I wanted to try the 301k resistor trick and I can confirm it works on Samsung Omnia 7.
I used this guide. If you're gonna do that too, then you should pay attention to these things:
- The guide refers to pin 4 and 5 being closest to the headphone socket. But on the omnia 7, the headphone and micro-usb sockets are the other way around if you compare it to the Galaxy S. The guide is for the Galaxy S, so you should really pay attention to which pins you solder the resistor(s). This is the best picture on how you should solder the resistor(s).
- Many micro-usb cables have no wire for pin 4. Some connectors don't even have a pin 4. You should first verify that your connector has all 5 pins. If you only have 4 wires, then you have to dismantle the connector and solder directly on the back of the connector.
I switched off my Omnia 7. I plugged in my jig and it went to downloadmode immediately.
It's late now, so I will see tomorrow what I will be going to flash on it. There quite a few roms and I'm not sure which one I should use. I have to figure that out first.
If anyone has questions about how to make a jig, just ask. I know how to make one now.
You should post pictures, how to make such a cable. Thanks
FromOuterSpace said:
You should post pictures, how to make such a cable. Thanks
Click to expand...
Click to collapse
The picture I linked to in my previous post look pretty clear to me. It shows what pins you have to use. The guide I linked to contain all the other necessary details. If you have any specific questions about something that is still not clear, you can ask me.

[Q] 2.3.4 can this be ported to our device

i know this might be in the wrong section but can this be ported to our device
http://forum.xda-developers.com/showthread.php?t=1140967
here is the build.prop
PHP:
modules
#
#device supports LTE
ro.config.lte=true
#device supports EHRPD
ro.config.ehrpd=true
#device supports simultaneous 1x voice + LTE
ro.config.svlte1x=true
#-from QCT Fusion
# Default network type.
# 8 => CDMA/EVDO/LTE auto mode preferred.
ro.telephony.default_network=8
wifi.interface=eth0
wifi.supplicant_scan_interval=120
# The OpenGL ES API level that is natively supported by this device.
# This is a 16.16 fixed point number
ro.opengles.version = 131072
# This is a high density device with more memory, so larger vm heaps for it.
# Change to 64m for Sense 3.0 elements
dalvik.vm.heapsize=64m
# For the default value of agps
ro.ril.def.agps.mode = 2
# For emmc phone storage
ro.phone_storage = 0
#
# This file describes the media capabilities and profiles
# using system properties.
#
# Note: The property key and value has some length
# limit as defined by PROPERTY_KEY_MAX and
# PROPERTY_VALUE_MAX, respectively
#
# WARNING: We may not use system properties for specifying
# media capabilities and profiles in the future
#
ro.media.enc.file.format = 3gp,mp4
ro.media.enc.vid.codec = m4v,h263,h264
ro.media.enc.vid.h263.width = 176,1280
ro.media.enc.vid.h263.height = 144,720
ro.media.enc.vid.h263.bps = 64000,6000000
ro.media.enc.vid.h263.fps = 1,30
ro.media.enc.vid.m4v.width = 176,1280
ro.media.enc.vid.m4v.height = 144,720
ro.media.enc.vid.m4v.bps = 64000,6000000
ro.media.enc.vid.m4v.fps = 1,30
ro.media.enc.vid.h264.width = 176,1280
ro.media.enc.vid.h264.height = 144,720
ro.media.enc.vid.h264.bps = 64000,6000000
ro.media.enc.vid.h264.fps = 1,30
# For FOTA setting (leave empty value to use default)
ro.config.htc.nocheckin = 1
# Release Bluetooth HW/SW information
ro.bt.chipset = Broadcom BCM4329-B1
ro.bt.stack = Broadcom BTL-A
ro.bt.stack.version = 2.0.50.032
#0x10000010010100101000011 represent bt profile list
ro.bt.profiles = 4270403
# Properties of BTLA stack
service.brcm.bt.activation = 0
service.brcm.bt.srv_active = 0
service.brcm.bt.hcid_active = 0
service.brcm.bt.btld = 0
service.brcm.bt.btld_pid = 0
service.brcm.bt.avrcp_pass_thru = 0
service.brcm.bt.avrcp_toggle = 1
service.brcm.bt.btport_redir_on = 1
#Welly_Fang
ro.cdma.home.operator.numeric = 310012
ro.cdma.home.operator.alpha = Verizon
ro.htc.device.slot1 = RUIM
# jerry.pj_chen [Start]20100730 For Verizon data retry
ro.cdma.data_retry_config = max_retries=infinite,0,0,60000,120000,480000,900000
ro.com.android.dataroaming = true
# jerry.pj_chen [end]20100730 For Verizon data retry
# For opensense sdk
ro.htc.common.version = 2.0.0.0
# Set Horizontal VVM = true and HorizontalBUA = true for Incredible#C/Lexikon/Mecha Verizon build
# Then Verizon VVM/BuA program can check this property to known if there is a Native VVM/BuA in ROM
ro.HorizontalVVM = false
ro.HorizontalBUA = false
# Properties of Scalado Denoise param.
postprocess.iso_midband = 400
postprocess.denoise_level = 5
# Following property will be reference by Settings.
ro.product.processor = 1GHz
ro.product.ram = 768MB
ro.product.display_resolution = 4.3 inch WVGA resolution
ro.product.main_camera = 8M
ro.product.front_camera = 1.3M
ro.product.bluetooth = 2.1 + EDR
ro.product.wifi = 802.11 b/g/n
#
# ADDITIONAL_BUILD_PROPERTIES
#
ro.url.legal=http://www.google.com/intl/%s/mobile/android/basic/phone-legal.html
ro.url.legal.android_privacy=http://www.google.com/intl/%s/mobile/android/basic/privacy.html
ro.com.google.networklocation=1
ro.setupwizard.mode=DISABLED
ro.config.ringtone=QuietlyBrilliant.mp3
ro.config.notification_sound=Zeta.mp3
ro.config.alarm_alert=NewDay.mp3
ro.config.cal_notification=Epsilon.mp3
ro.config.msg_notification=Gamma.mp3
ro.com.google.gmsversion=2.3_r3
media.a1026.nsForVoiceRec=0
htc.audio.alt.enable=1
htc.audio.hac.enable=1
net.ppp0.dns1=8.8.8.8
net.ppp0.dns2=8.8.4.4
ro.media.codec_priority_thumb=so
dalvik.vm.lockprof.threshold=500
dalvik.vm.dexopt-flags=m=y
net.bt.name=Android
dalvik.vm.stack-trace-file=/data/anr/traces.txt
ro.toolkit.romversion=Das BAMF Sense 3.0 RC
ro.toolkit.romedition=BAMF Sense 3.0 RC
ro.toolkit.romtype=gingerbread
ro.stats.devname=TeamBAMF
ro.stats.romname=DasBAMF
ro.stats.romversion=2.1
I think this is 2.3.4 when you look at build.prop with a text editor and search for 2.3.4 it comes up twice.
kyleastley said:
i know this might be in the wrong section but can this be ported to our device
http://forum.xda-developers.com/showthread.php?t=1140967
I think this is 2.3.4 when you look at build.prop with a text editor and search for 2.3.4 it comes up twice.
Click to expand...
Click to collapse
But i'm already running 2.3.4
Uploaded with ImageShack.us

No data transferred when 3G tethering

I found USB tethering to my laptop with wifi works fine but 3G does not. With 3G tethering I can connect but no data is transferred.
Same problem with 3G hotspot - no data is transferred.
I have read this 3G tethering problem is common for certain devices, particularly with Sony.
Has anyone else experienced this problem or have any ideas what the problem is?
In case relevant:
HTC Wildfire S A510b
Android 2.3.5
Virgin Mobile
just a thought - could this be caused by the APN settings?
The 3G internet works fine on the phone.
I tried my sim card in another phone and 3G tethering worked fine.
And I tried another sim card in my phone and 3G tethering didn't work.
So common factor is this phone.
hoju_ said:
I tried my sim card in another phone and 3G tethering worked fine.
And I tried another sim card in my phone and 3G tethering didn't work.
So common factor is this phone.
Click to expand...
Click to collapse
You have a SIM card? Are you in the US?
I'm in Australia. (most countries use SIM cards)
But problem seems to be the phone, not the SIM card.
hoju_ said:
I'm in Australia. (most countries use SIM cards)
But problem seems to be the phone, not the SIM card.
Click to expand...
Click to collapse
Well yes but in the US the phone is CDMA (no SIM), that is why I asked since you did not state what country.
With the US version Virgin disabled tethering on the phone, not sure if they did it there too.
Is your phone rooted? If so then you might could re-enable that function.
ah OK.
Phone is not rooted. I tried superoneclick but root failed.
That is very interesting some phones have tethering disabled.
Is there a way to check whether this is the case?
hoju_ said:
ah OK.
Phone is not rooted. I tried superoneclick but root failed.
That is very interesting some phones have tethering disabled.
Is there a way to check whether this is the case?
Click to expand...
Click to collapse
I know that hot spot is disabled in the build.prop but am not sure if that would also disable tethering. If you was rooted then you could copy you system folder so I could look at it to see.
Check with a local cell shop and see if they can unlock your cell with a XTC-Clip.
Phone is already unlocked, just not rooted.
HTC support said I needed to install HTC Sync on my computer to get 3G tethering working. Does that sound right?
I can't test because HTC Sync only supports Windows, which I don't have.
hoju_ said:
Phone is already unlocked, just not rooted.
HTC support said I needed to install HTC Sync on my computer to get 3G tethering working. Does that sound right?
I can't test because HTC Sync only supports Windows, which I don't have.
Click to expand...
Click to collapse
You might need the modem drivers for you OS to get the tethering to work. I will test this weekend to see since I never used tethering but have and do use hot-spot.
I experience the same problem for both 3G tethering and 3G hotspot - connects but no data transfer. And wifi tethering works, so I assumed it was not a driver problem.
Would it be worth trying a tethering app in case the problem is with the builtin software?
hoju_ said:
I experience the same problem for both 3G tethering and 3G hotspot - connects but no data transfer. And wifi tethering works, so I assumed it was not a driver problem.
Would it be worth trying a tethering app in case the problem is with the builtin software?
Click to expand...
Click to collapse
Can you copy you build.prop and pm it to me?
How would you recommend extracting the build.prop?
I understand it is located in /system/build.prop, but when mounting the phone on my computer this folder is not available.
I installed some build.prop editor apps where I can view particular properties, but they did not have a feature to copy the file elsewhere.
hoju_ said:
How would you recommend extracting the build.prop?
I understand it is located in /system/build.prop, but when mounting the phone on my computer this folder is not available.
I installed some build.prop editor apps where I can view particular properties, but they did not have a feature to copy the file elsewhere.
Click to expand...
Click to collapse
You should be able to use Es File Explorer or Explorer copy it to your sdcard folder then get thru you computer.
awesome - Explorer worked well. Here is the build.prop:
Code:
ro.ril.oem.ecclist=112,000,911
ro.ril.enable.a52=0
ro.ril.enable.a53=0
ro.ril.hsdpa.category=8
ro.ril.hsxpa=1
ro.ril.fast.dormancy.rule=0
ro.ril.radio.svn=2
ro.ril.disable.mcc.filter=1
ro.ril.emc.mode=1
ro.ril.disable.fd.plmn.prefix=23402,23410,23411,23420
ro.ril.enable.sdr=0
ro.ril.oem.show.act=1
ro.ril.enable.r8fd=0
ro.com.google.clientidbase=android-htc
ro.com.google.clientidbase.yt=android-htc
ro.com.google.clientidbase.am=android-telstra-au
ro.com.google.clientidbase.vs=android-htc
ro.com.google.clientidbase.gmm=android-htc
ro.com.google.clientidbase.ms=android-htc
ro.ril.vmail.50501=+61101
ro.product.model=HTC Wildfire S A510b
# begin build properties
# autogenerated by buildinfo.sh
ro.aa.rid=673
ro.cwkey=TELST001
ro.aa.skulist=841
ro.aa.customizationid=394070
ro.onecid=
ro.aa.mainsku=841
ro.aa.taskid=271810
ro.aa.report=com
ro.aa.romver=2.26.841.4
ro.aa.maincid=TELST001
ro.aa.modelid=PG7612000
ro.aa.project=Marvel_S
ro.aa.cidlist=TELST001
ro.com.google.clientidbase=android-htc
ro.build.id=GRJ90
ro.build.display.id=GRJ90
ro.build.version.incremental=362953.4
ro.build.version.sdk=10
ro.build.version.codename=REL
ro.build.version.release=2.3.5
ro.build.date=五 7月 13 18:54:53 CST 2012
ro.build.date.utc=1342176893
ro.build.type=user
ro.build.user=
ro.build.host=ABM018
ro.build.tags=release-keys
ro.product.model=htc wildfire s a510e
ro.product.brand=telstra_wwe
ro.product.name=htc_marvel
ro.product.device=marvel
ro.product.board=marvel
ro.product.cpu.abi=armeabi
ro.product.manufacturer=HTC
ro.product.locale.language=mdpi
ro.product.locale.region=
ro.wifi.channels=
ro.board.platform=msm7k
# ro.build.product is obsolete; use ro.product.device
ro.build.product=marvel
# Do not try to parse ro.build.description or .fingerprint
ro.build.description=2.26.841.4 CL362953 release-keys
ro.build.description=2.26.841.4 CL362953 release-keys
ro.build.changelist=362953
ro.product.ua=
ro.build.fingerprint=telstra_wwe/htc_marvel/marvel:2.3.5/GRJ90/362953.4:user/release-keys
ro.build.project=Marvel_S:271810
ro.product.version=2.26.841.4
keyguard.no_require_sim=1
# end build properties
#
# system.prop for device
#
rild.libpath=/system/lib/libhtc_ril.so
# RilLibPath for Ganlite by Godel_Chen
rild.libpath.ganlite=/system/lib/librilswitch.so
rilswitch.vendorlibpath=/system/lib/libhtc_ril.so
rilswitch.ganlibpath=/system/lib/libganril.so
ro.ril.hep = 1
ro.ril.enable.dtm = 0
ro.ril.hsdpa.category = 8
# Modify MMS APN retry timer from 5s to 2s.
ro.gsm.2nd_data_retry_config = max_retries=3, 2000, 2000, 2000
wifi.interface = eth0
ro.ril.htcmaskw1.bitmask = 4294967295
ro.ril.htcmaskw1 = 14449
# Time between scans in seconds. Keep it high to minimize battery drain.
# This only affects the case in which there are remembered access points,
# but none are in range.
wifi.supplicant_scan_interval = 15
# density in DPI of the LCD of this board. This is used to scale the UI
# appropriately. If this property is not defined, the default value is 160 dpi.
#ro.sf.lcd_density = 120
ro.sf.lcd_density = 160
ro.com.google.locationfeatures=1
# The OpenGL ES API level that is natively supported by this device.
# This is a 16.16 fixed point number
ro.opengles.version = 131072
dalvik.vm.heapsize=20m
# Default network type
# 0 => WCDMA Preferred.
ro.telephony.default_network = 0
# View configuration for QVGA
view.fading_edge_length = 8
view.touch_slop = 15
view.minimum_fling_velocity = 25
view.scroll_friction = 0.008
# For SD storage insert notification sound
persist.service.mount.playsnd = 0
# For the agps default value
ro.ril.def.agps.mode = 2
# For 7227 projects ,default enable AMR-Wideband ([email protected]: WSD request to disable it by default)
# ro.ril.enable.amr.wideband = 1
# For no auto focus devices
ro.workaround.noautofocus = 1
# default value of brightness
settings.display.brightness=143
# For HSDPA low throughput
ro.ril.disable.power.collapse = 1
# For PDP overlap problem
ro.ril.avoid.pdp.overlap = 1
#
# This file describes the media capabilities and profiles
# using system properties.
#
# Note: The property key and value has some length
# limit as defined by PROPERTY_KEY_MAX and
# PROPERTY_VALUE_MAX, respectively
#
# WARNING: We may not use system properties for specifying
# media capabilities and profiles in the future
#
ro.media.enc.file.format = 3gp,mp4
ro.media.enc.vid.codec = m4v,h263
ro.media.enc.vid.h263.width = 176,640
ro.media.enc.vid.h263.height = 144,480
ro.media.enc.vid.h263.bps = 64000,1600000
ro.media.enc.vid.h263.fps = 1,30
ro.media.enc.vid.m4v.width = 176,640
ro.media.enc.vid.m4v.height = 144,480
ro.media.enc.vid.m4v.bps = 64000,1600000
ro.media.enc.vid.m4v.fps = 1,30
#
# Increase SKIA decode memory capability for progressive jpg file
#
ro.media.dec.jpeg.memcap = 20000000
# try to disable proximity sensor in call by default
#gsm.proximity.enable=false
# For FOTA setting (leave empty value to use default)
ro.htc.checkin.url = http://andchin.htc.com/android/checkin
ro.htc.checkin.crashurl = http://andchin.htc.com/android/crash
ro.htc.checkin.url_CN = http://andchin.htccomm.com.cn/android/checkin
ro.htc.checkin.crashurl_CN = http://andchin.htccomm.com.cn/android/crash
ro.htc.checkin.exmsg.url = http://fotamsg.htc.com/android/extra/
ro.htc.checkin.exmsg.url_CN = http://fotamsg.htccomm.com.cn/android/extra/
ro.htc.appupdate.url = http://apu-chin.htc.com/check-in/rws/and-app/update
ro.htc.appupdate.url_CN = http://apu-chin.htccomm.com.cn/check-in/rws/and-app/update
ro.htc.appupdate.exmsg.url = http://apu-msg.htc.com/extra-msg/rws/and-app/msg
ro.htc.appupdate.exmsg.url_CN = http://apu-msg.htccomm.com.cn/extra-msg/rws/and-app/msg
# Release Bluetooth HW/SW information
ro.bt.chipset = Broadcom BCM4329-B1
ro.bt.version = Bluetooth 2.1 + EDR
ro.bt.stack = Broadcom BTL-A
ro.bt.stack.version = 2.2.017
#0x10000010010100100000011 represent bt profile list
ro.bt.profiles = 4270339
# Properties of BTLA stack
service.brcm.bt.activation = 0
service.brcm.bt.srv_active = 0
service.brcm.bt.hcid_active = 0
service.brcm.bt.btld = 0
service.brcm.bt.btld_pid = 0
service.brcm.bt.avrcp_pass_thru = 0
service.brcm.bt.avrcp_toggle = 1
# AOLC
htc.audio.alc.enable = true
# Following property will be reference by Settings.
ro.product.processor=600MHz
ro.product.ram=512MB
ro.product.display_resolution=3.2 inch HVGA resolution
ro.product.main_camera=5M
ro.product.front_camera=NA
ro.product.bluetooth= 3.0
ro.product.wifi = 802.11 b/g/n
# update the acoustic table for Buzz NEL lab testing
ro.ril.update.acoustic.table = 1
# For opensense sdk
ro.htc.common.version = 2.1.0.0
#
# ADDITIONAL_BUILD_PROPERTIES
#
ro.setupwizard.mode=OPTIONAL
ro.config.ringtone=QuietlyBrilliant.mp3
ro.config.notification_sound=Zeta.mp3
ro.config.alarm_alert=NewDay.mp3
ro.config.cal_notification=Epsilon.mp3
ro.config.msg_notification=Gamma.mp3
ro.setupwizard.mode=DISABLD
ro.com.google.gmsversion=2.3_r7
net.bt.name=Android
dalvik.vm.stack-trace-file=/data/anr/traces.txt
From your build.prop they did not set a disable flag for hot-spot or tether. The only other thing I can suggest is try a different Rom on you device, but backup your current one First.
You can try this:
Code:
adb shell
rm -r /data/local/tmp
ln -s /data/ /data/local/tmp
exit
adb reboot
adb shell
echo 'ro.tether.denied=false' > /data/local.prop
exit
adb reboot
Then try tethering again.
darn, that sounds complicated.
Thanks for checking the build.prop
hoju_ said:
darn, that sounds complicated.
Thanks for checking the build.prop
Click to expand...
Click to collapse
Try this:
Code:
adb shell
rm -r /data/local/tmp
ln -s /data/ /data/local/tmp
exit
adb reboot
adb shell
echo 'ro.tether.denied=false' > /data/local.prop
exit
adb reboot
I understand that adb process requires root.
I tried superoneclick, unlockroot, and unrevoked to try and root the device, but all failed.
Are there other options?
hoju_ said:
I understand that adb process requires root.
I tried superoneclick, unlockroot, and unrevoked to try and root the device, but all failed.
Are there other options?
Click to expand...
Click to collapse
Check this link on CDMA S-OFF.

gps.con

Hi. Can someone please upload the stock att gps.conf from system/etc please.
I flashed an international Rom on my phone and the gps is not locking on my phone.
Thanks in advance guys
haruyukisama said:
Hi. Can someone please upload the stock att gps.conf from system/etc please.
I flashed an international Rom on my phone and the gps is not locking on my phone.
Thanks in advance guys
Click to expand...
Click to collapse
Asking for this as well... your gps.conf on a stock ATT E980 ROM.
The file will be located under system/etc/gps.conf
I'm testing something related to the V5 stock based ROM with G2 mods.
Thanks!
#Test
#NTP_SERVER=time.gpsonextra.net
#Asia
# NTP_SERVER=asia.pool.ntp.org
#Europe
# NTP_SERVER=europe.pool.ntp.org
#North America
NTP_SERVER=north-america.pool.ntp.org
XTRA_SERVER_1=http://xtra1.gpsonextra.net/xtra2.bin
XTRA_SERVER_2=http://xtra2.gpsonextra.net/xtra2.bin
XTRA_SERVER_3=http://xtra3.gpsonextra.net/xtra2.bin
# DEBUG LEVELS: 0 - none, 1 - Error, 2 - Warning, 3 - Info
# 4 - Debug, 5 - Verbose
DEBUG_LEVEL = 3
# Intermediate position report, 1=enable, 0=disable
INTERMEDIATE_POS=0
# supl version 1.0
#SUPL_VER=0x10000
# supl version 2.0
SUPL_VER=0x20000
# Error Estimate
# _SET = 1
# _CLEAR = 0
ERR_ESTIMATE=0
# GPS Capabilities bit mask
# SCHEDULING = 1
# MSB = 2
# MSA = 4
# DEMAND_TIME = 0x10
# ULP = 0x20
# default = MSA | MSB | SCHEDULING | ULP
# CAPABILITIES=0x27 // Not support ULP
CAPABILITIES=0x17
# Accuracy threshold for intermediate positions
# less accurate positions are ignored, 0 for passing all positions
# ACCURACY_THRES=5000
################################
##### AGPS server settings #####
################################
# FOR SUPL SUPPORT, set the following
# SUPL_HOST=supl.host.com or IP
SUPL_HOST=
SUPL_PORT=7275
POSITION_MODE=1
#POSITION_MODE=0 -> GPS_POSITION_MODE_STANDALONE
#POSITION_MODE=1 -> GPS_POSITION_MODE_MS_BASED
#POSITION_MODE=2 -> GPS_POSITION_MODE_MS_ASSISTED
# FOR C2K PDE SUPPORT, set the following
# C2K_HOST=c2k.pde.com or IP
# C2K_PORT=1234
################################
# Sensor Settings
################################
# Needs to be set explicitly based on sensor
# There is no default value.
#GYRO_BIAS_RANDOM_WALK=
SENSOR_ACCEL_BATCHES_PER_SEC=2
SENSOR_ACCEL_SAMPLES_PER_BATCH=5
SENSOR_GYRO_BATCHES_PER_SEC=2
SENSOR_GYRO_SAMPLES_PER_BATCH=5
# Sensor Control Mode (0=AUTO, 1=FORCE_ON)
SENSOR_CONTROL_MODE=0
# Enable or Disable Sensors for GPS use (0=Enable, 1=Disable)
SENSOR_USAGE=0
# Choose GSIFF sensor provider (1=DSPS, 2=Android NDK)
SENSOR_PROVIDER=1
################################
# Indoor Positioning Settings
################################
# 0: QUIPC disabled, 1: QUIPC enabled, 2: forced QUIPC only
QUIPC_ENABLED = 0
################################
# EXTRA SETTINGS
################################
# Enable or Disable Wiper (1=Enable, 0=Disable)
//LGE_UPDATE_S : [email protected] 2012-05-03
//[GNSS] Temp disable WIPER to "0"
ENABLE_WIPER=0
//LGE_UPDATE_E : [email protected] 2012-05-03
####################################
# LTE Positioning Profile Settings
####################################
# 0: Enable RRLP on LTE(Default) 1: Enable LPP_User_Plane on LTE
LPP_PROFILE = 0
################################
# LGE EXTRA SETTINGS
################################
VENDOR=ATT
LGE_TLS_MODE=5
LGE_GPS_POSITION_MODE=1
Sent from my LG-E980 using Tapatalk

gps.config

Hi,
Does anyone have the stock GPS.config file?
Thanks
hill67 said:
Hi,
Does anyone have the stock GPS.config file?
Thanks
Click to expand...
Click to collapse
Stock from which rom / region?
Sorry,
I am in Europe, using RR ROM nougat 7.7.1 (so not stock, my mistake)
Code:
#Uncommenting these urls would only enable #the power up auto injection and force injection(test case). #XTRA_SERVER_1=http://xtrapath1.izatcloud.net/xtra2.bin #XTRA_SERVER_2=http://xtrapath2.izatcloud.net/xtra2.bin #XTRA_SERVER_3=http://xtrapath3.izatcloud.net/xtra2.bin #ifdef VENDOR_EDIT # [email protected] add gps xtra server for speed up gps cold start XTRA_SERVER_1=http://xtrapath1.izatcloud.net/xtra3grc.bin XTRA_SERVER_2=http://xtrapath2.izatcloud.net/xtra3grc.bin XTRA_SERVER_3=http://xtrapath3.izatcloud.net/xtra3grc.bin #endif #Version check for XTRA #DISABLE = 0 #AUTO = 1 #XTRA2 = 2 #XTRA3 = 3 XTRA_VERSION_CHECK=0 # Error Estimate # _SET = 1 # _CLEAR = 0 ERR_ESTIMATE=0 #Test NTP_SERVER=time.gpsonextra.net #Asia # NTP_SERVER=asia.pool.ntp.org #Europe # NTP_SERVER=europe.pool.ntp.org #North America # NTP_SERVER=north-america.pool.ntp.org # DEBUG LEVELS: 0 - none, 1 - Error, 2 - Warning, 3 - Info # 4 - Debug, 5 - Verbose # If DEBUG_LEVEL is commented, Android's logging levels will be used DEBUG_LEVEL = 2 # Intermediate position report, 1=enable, 0=disable INTERMEDIATE_POS=0 # Below bit mask configures how GPS functionalities # should be locked when user turns off GPS on Settings # Set bit 0x1 if MO GPS functionalities are to be locked # Set bit 0x2 if NI GPS functionalities are to be locked # default - non is locked for backward compatibility #GPS_LOCK = 0 # supl version 1.0 SUPL_VER=0x10000 # Emergency SUPL, 1=enable, 0=disable SUPL_ES=0 #Choose PDN for Emergency SUPL #1 - Use emergency PDN #0 - Use regular SUPL PDN for Emergency SUPL USE_EMERGENCY_PDN_FOR_EMERGENCY_SUPL=1 #SUPL_MODE is a bit mask set in config.xml per carrier by default. #If it is uncommented here, this value will overwrite the value from #config.xml. #MSA=0X2 #MSB=0X1 #SUPL_MODE= # GPS Capabilities bit mask # SCHEDULING = 0x01 # MSB = 0x02 # MSA = 0x04 # ON_DEMAND_TIME = 0x10 # GEOFENCE = 0x20 # default = ON_DEMAND_TIME | MSA | MSB | SCHEDULING | GEOFENCE CAPABILITIES=0x37 # Accuracy threshold for intermediate positions # less accurate positions are ignored, 0 for passing all positions # ACCURACY_THRES=5000 ################################ ##### AGPS server settings ##### ################################ # FOR SUPL SUPPORT, set the following # SUPL_HOST=supl.host.com or IP # SUPL_PORT=1234 # FOR C2K PDE SUPPORT, set the following # C2K_HOST=c2k.pde.com or IP # C2K_PORT=1234 # Bitmask of slots that are available # for write/install to, where 1s indicate writable, # and the default value is 0 where no slots # are writable. For example, AGPS_CERT_WRITABLE_MASK # of b1000001010 makes 3 slots available # and the remaining 7 slots unwritable. #AGPS_CERT_WRITABLE_MASK=0 #################################### # LTE Positioning Profile Settings #################################### # 0: Enable RRLP on LTE(Default) # 1: Enable LPP_User_Plane on LTE # 2: Enable LPP_Control_Plane # 3: Enable both LPP_User_Plane and LPP_Control_Plane LPP_PROFILE = 2 ################################ # EXTRA SETTINGS ################################ # NMEA provider (1=Modem Processor, 0=Application Processor) NMEA_PROVIDER=0 # Mark if it is a SGLTE target (1=SGLTE, 0=nonSGLTE) SGLTE_TARGET=0 ################################################## # Select Positioning Protocol on A-GLONASS system ################################################## # 0x1: RRC CPlane # 0x2: RRLP UPlane # 0x4: LLP Uplane #ifndef [email protected] enable all bit mask for GLONASS #A_GLONASS_POS_PROTOCOL_SELECT = 0 #else A_GLONASS_POS_PROTOCOL_SELECT = 15 #endif
Save as gps.conf

Categories

Resources