[XV6700, PPC-6700 General] moebiusway:
continuation

These seem to be listed in the registry at:

HKLM\Services\PhoneExt\KeyProgram

##1122 - Test Menu

##7659 - Ploy Test

##847446 - Phone Programming

This code is to view the ESN- that is on the back of the phone.But if someone takes the sticker off the phone. then the phone is use-less without this information!

Enter "##20022002" and press the end key

Select "Select NAM"

SPC Code is "000000"

Next screen, select "Phone Info"

Select "ESN"

The ESN that appears is not the ESN that VM uses to activate the phone. There are three numbers on the sticker and the number that appears is the nember/letter combination that appears under the second barcode.

#5625* - lock code

##1144 - key tone length

**5625 Gets you maintence required?

##0515 -- Once the code is entered, the code doesn't seem to go away from the screen until you push End, Send, or OK. Don't know what else this code does.

##1024 -- Displays the Dynamic Range menu, lets you select between 85db and 102db.

##1111 -- Displays EFS (Electronic File System?) used and available memory, under some circumstances (most times it just shows a grayed screen

##1112 -- Displays ERI status (?), again, under some circumstances

##1113 -- Displays another ERI status, under some circumstances

##1114 -- Displays another ERI status, under some circumstances

##1122 -- Displays a diagnostic screen -- lets you...

1) test the ringer

2) test the vibrator

3) test the microphone (puts the phone into "voice echo" mode)

4) test the screen (makes the screen white)

5) test the screen (makes the screen red)

6) test the screen (makes the screen green)

7) test the screen (makes the screen blue)

8) test the screen (makes the screen black

9) test the volume (plays the "Allegro" ringer)

##1133 -- Sets certain "default" options: Sets "Allegro" as the ringer, sets all volumes to level 3, and (watch out for this one!) sets the phone to auto-answer incoming calls after 5 seconds (this option can be changed by going to Menu-6-6-3).

##1144 -- Displays a screen that lets you set the tone length when keys are pressed

##2222 -- Displays a status screen that shows AGC value (Automatic Gain Controller?), LNA (?) status, and MIXER (?) status

##2240 -- Displays a software test menu...I don't know what the different options mean.

##2250 -- Displays a RFNV Contents menu. I don't know what the options here mean, except option 5 lets you turn Factory Test Mode on and off. When Factory Test Mode is on, you can't make or receive any calls.

##2283 -- Displays a DM Baud Rate menu. I'm assuming this lets you select what speed is used for data downloading.

##2768 -- Displays a screen that appears to show battery status ("ADC_BATT") and "AFTR IIR"

##2773 -- Displays a debug screen.

##4771 -- Starts a GPS test program. You have to enter the security code to access this program (usually 000000, if it hasn't been changed by someone else). If anyone knows how to make the GPS work... This code doesn't do anything if the phone is in factory test mode.

##4776 -- Displays a screen that apparently lets you see the GPS AGC value. The phone resets itself after leaving this screen, or shuts itself off if you hit #.

##5856 -- Renders the screen black, except for the icon bar at the top of the screen, which becomes completely white. The phone responds to commands as normal, except that nothing is shown on the screen. The phone must be reset to remove this mode (unless someone knows of a reversal code).

##6782 -- Displays a "Clear MRU?" menu. Not sure what this does. Resets the phone if you answer yes. Performs a memory cleanup?

##6787 -- Displays a "Store nsts" menu...don't know what this does.

##7627 -- Displays the data connection type menu -- same as doing Menu-8-2.

##7628 -- Displays a dialog that tells you what option you have selected in the ##7627 menu.

##7678 -- Displays a RunTime DevMap menu...presumably this lets you pick what device cables will be used for diagnostics and data transfers.

##7726 -- Starts an analog test mode. This mode lets you enter six-digit codes. The first two digits have significance when it is "11", which apparently lets you select a channel. Turns the phone off when you press End.

##8888 -- Shows a list of the different MIDI effects the phone can create (note that you can't move through the list unless etiquette mode is turned on, but you can turn on etiquette mode [hold down "*" until the phone says "Etiquette Mode On"], enter the code, then scroll to a point in the list directly before or after the desired sound, then turn etiquette mode off, and then move up or down to the desired item on the list)

##11223344 -- Displays a screen similar to the ##1122 screen, but pressing different buttons will unlock different ringers. Most of these are either duplicates of ringers already pre-loaded on the phone, or animated ringers that don't work, but there is one ringer called "carlos_latin", that isn't pre-loaded on the phone. The unlocked ringers will show up in the "My Downloads" or "Animated Ringer" menus.

##20022002 -- Displays the security Menu, used for programming the phone when you purchase it from the retailer. The options are:

1) Set NAM -- used to program the phone for your service. SPC code (if it wasn't changed) is usually 000000. The phone will require a reset after leaving this menu.

1) Phone Info -- Read-only values.

1) ESN -- Electronic Serial Number.

2) CAI version

3) Firmware version

4) Phone model

5) Station Class Mark

2) NAM 1 -- Preferred carrier network

1) Mini Setup

1) Phone Number -- according to the phone company -- may not actually match up with the phone number you use to call yourself!

2) Home System ID

3) Dir Number -- The phone number shown in your phone info screens, and when the phone is turned on (this can be changed with no ill effects)

2) Full Setup

1) NAM Name -- The name of your carrier that is shown when the phone is turned on (this can be changed with no ill effects)

2) Phone Number -- same as in Mini Setup

3) FM Setup

4) CDMA Setup

5) Home Sys.

6) PRL Info.

7) Dir Number -- Same as in Mini Setup

3) NAM 2 -- backup carrier network -- All options same as NAM 1 setup

4) SPC code -- passcode you entered to get into the NAM programming menu

5) SCI

2) Voice Option -- Presumably this controls the data transmission rate for voice signals sent over the digital network.

#5265* -- Unlocks the phone (if it was locked through Menu-6-3-1-1), and tells you what your password was.

##737247 -- Displays a Repair menu. (?)

##2769737 -- Lets you change IP settings for the browser.

##27732726 -- Software test menu.

##27752345 -- Misc. test menu.

:D

type in ##charge (##242743)

##33284 Field Diagnostics

##778 Data statistics

##374 Update ERI

##775 Update PRL

##7764726 NAM and ESN Edit-nitiating EPST via the dial codes above and enabling wmodem in the same screens you enable bluetooth toggles the HideSerial and Multi-Nai values to 0x1 (1) under /hklm/software/oem/wmodem/ wModemDUN stays disabled.

NOTE: All of the codes below require you to press the {END} key at the end of the number.

##20022002 - NAM programming Be Careful!

##7678 (##PORT) - RunTime DevMap

##7738 (##PREV) - Change P_Rev. Allows you to force CDMA (Select Rev 4)

##2283 (##BAUD) - Set the data port baud rate

##2240 - S/W test

##2250 - RFNV Contents. Tons of options here. I have no idea what they do.

##1111 - EFS space (This doesn't seem to work on the 8900. The screen loses resolution and freezes...Press {END} to unfreeze)

##2222 - RF stuff displays CDMA Automatic Gain Control and Low Noise Amplifier data

##1122 - Test ringtone, vibrate, and colors. Adjust contrast and stuff.

##1133 - Be careful! Resets the phone back to factory settings.

##1144 - Change the length of the keypad tones. Navigation keys don't work here, use the numbers to change values.

#7623 (#ROAD) Roadside assistance. I'm not sure what they do, but I'm sure it will cost you.

#5625* (#LOCK*) Unlocks keypad and tells you the code (very useful for sure)

##2769737 (##BROWSER) Internet Options. This is where you can change uplink IP port

##27732726 - Software tests and stuff. Displays the date/time of firmware. Lots of cool stuff in here.

##27752345 - Battery info and modification. Be careful!

2539** - Changes authentication key. This is the A-Key or Authentication Key. Don't mess with it!

**1004 DM Mode Enable (harmless but I'm unsure what it does, maybe don't try just in case)

**1005 DS Mode Enable (same as above)

##2773 - Debug - Field test mode.

Rx = Receive power measured in dB.

Tx = Send power measured in dB.

P_Rev Protocol Revision = 6 is 1x, 4 is regular CDMA.

Ec = A measure of how strong individual connections from the tower are compared to everything that the tower is transmitting. Compares the pilot signal to the overall level of traffic, but this is a good indicator of how your connection compares to the overall level of traffic from the tower. -3 dB to -8 dB is usually a “good” Ec. When Ec gets larger, like -10 dB or -15 dB phones will start having trouble maintaining their connections, even with full signal. C = Channel. B side carriers start on 384. Will increase by 1.25MHz or 41 channels.

##2773 <end> debug mode - Find out what's really going on with the Verizon network

##8378 <OK> Force CDMA

##1111 gives you EFS stautus

##550317# access the mdn and msi id