SEQ COMMAND TX_OPCODE RX_OPCODE DATA_FIELDS DATA_DEFAULTS OPTION_FIELDS OPTION_DEFAULTS DATA_WIDTH DESCRIPTION
1 READ TIMEOUT
READ
2
YES
Read only
2 GENERIC_COMMAND - Send Generic Opcode/Data Hex String STRING TIMEOUT
READ
10
YES
Enter the opcode and parameter data in the command window.
3 AT_MODE - Sends AT+MODE=1 for serial comm 41542B4D4F44453D310D0A 41542B4D4F44453D310D0A TIMEOUT
READ
2
YES
No data required
4 AUD_CTRL - Control Audio 0003 0003 CONTROL 01 TIMEOUT
READ
2
YES
CONTROL (1 byte):
00=Vibrator off
01=Vibrator on
5 AUD_LPB - Audio Loopback 0004 0004 TYPE 00 TIMEOUT
READ
2
YES
TYPE (1 byte):
02=13k Vocoder off
03=13k Vocoder on
6 AUD_LVL - Audio Level 0005 0005 LEVEL 80 TIMEOUT
READ
2
YES
LEVEL (1 byte):
00 to 0F=Set volume level
8x=Read current volume level
7 AUD_PATH - Set Audio Path 0006 0006 DATA 0000 TIMEOUT
READ
2
YES
DATA (variable):
Depends
8 AUD_TN_GEN - Enable/Disable Audio Tone 0044 0044 ACTION
FREQ1
LEVEL1
FREQ2
LEVEL2
FREQ3
LEVEL3
80
0000
0000
0000
0000
0000
0000
TIMEOUT
READ
2
YES
ACTION (1 byte):
Bit 7:
0x=Generate tone
8x=Stop generating tone
Bits 6:0:
Number of frequencies to generate - Valid range=01 to 03

FREQ1 (2 bytes):
First phased frequency

LEVEL1 (2 bytes):
Valid range=0000 to 3FFF

FREQ2 (2 bytes):
Second phased frequency

LEVEL2 (2 bytes):
Valid range=0000 to 3FFF

FREQ3 (2 bytes):
Third phased frequency

LEVEL3 (2 bytes):
Valid range=0000 to 3FFF

9 AUD_TN_LST - Audio Tone List 0000 0000 ENABLE
TONE
80
0000
TIMEOUT
READ
2
YES
ENABLE (1 byte):
00=Enable tone
80=Disable tone

TONE (2 bytes):
10 AUTOCYCLE_5100 0002 0002 ENABLE 01 TIMEOUT
READ
2
YES
ENABLE (1 byte):
01=Enable auto cycle mode
11 AUTOCYCLE_6xxx 0002 0002 RESERVED
AMPSCHAN
RESERVED
CDMACHAN
RESERVED
PCSCHAN
RESERVED
AMPSPWR
CDMAPWR
PCSPWR
RESERVED
AUDIOGAIN
RESERVED
RINGERGAIN
RESERVED
01000000
0000
0000
0000
0000
0000
0000
00
00
00
00
00
000000
00
0000000000
TIMEOUT
READ
2
YES
RESERVED (4 bytes):
Default value
AMPSCHAN (2 ytes):
Amps channel to use
RESERVED (2 bytes)
CDMACHAN (2 bytes):
Cdma channel to use
RESERVED (2 bytes)
PCSCHAN (2 bytes):
pcs channel to use
RESERVED (2 bytes)
AMPSPWR (1 byte):
amps power level
CDMAPWR (1 byte):
cdma power level
PCSPWR (1 byte):
pcs power level
RESERVED (1 byte)
AUDIOGAIN (1 byte) audio gain level
RESERVED (3 bytes)
RINGERGAIN (1 byte):
ringer gain to use
RESERVED (5 bytes)
12 BT - Bluetooth Control 0042 0042 DATA TIMEOUT
READ
2
YES
DATA (variable):
BT TCI unsolicited message
13 CARRIER - Enable/Disable Transmit Carrier 0007 0007 ENABLE 01 TIMEOUT
READ
2
YES
ENABLE (1 byte):
01 = enable
00 = disable
14 CP_MODE - Set Sub-mode 000A 000A SUBMODE 80 TIMEOUT
READ
2
YES
SUBMODE (1 byte):
80=Get
01=CDMA800
02=CDMA1900
15 CW 0D03 0D03 MODE
DATA
00
TIMEOUT
READ
2
YES
MODE (1 byte):
00=Off
01=On

DATA:
Not needed for normal command.
For BT options: 01=BT
Supporting Data:
BT Channel (1 byte)
16 DIP_SWITCH 0D00 0D00 ACTION
DATA
01
TIMEOUT
READ
2
YES
ACTION (1 byte):
01=Get
00=Set
02=Clear Tx Accum
03=Read Tx Acum
Data
Dip switch value
17 ERS_PANIC - Erase Panic Information In Flash 000C 000C TIMEOUT
READ
2
YES
No data required.
18 FLEX_SWITCH 0D05 0D05 MODE 00 TIMEOUT
READ
2
YES
MODE (1 byte):
00=Factory
01=Customer
19 FLIP - Read/Write Flip 0043 0043 STATE 80 TIMEOUT
READ
2
YES
STATE (1byte):
80=Read the flip state
40=Write the flip state opened
00=Write the flip state closed
20 FMTX 0D09 0D09 PARAMETER
DATA
0000
0000
TIMEOUT
READ
2
YES
PARAMETER (2 bytes):
0000=SetFreq
0001=Mute Control
0002=Stereo Control
0003=Tx Control
Value (2 bytes):
Dependant on parameter
21 FSAC - File System Access 004A 004A PARAMETER
DATA
00000004 TIMEOUT
READ
60
YES
PARAMETER (4 bytes):
0x00000000 = Open File
0x00000001 = Read File
0x00000002 = Write File
0x00000003 = Seek File
0x00000004 = Close File
0x00000005 = Delete File
0x00000006 = Clear File
0x00000010 = Format Volume

DATA (variable):
Open file:
Bytes (1-4)
00000000 = Default
00000001 = Read Only
00000002 = Hidden
00000004 = Preload/System
Bytes (5 - (n+4))
Filename

Read File (4 Bytes):
# of bytes to read

Write File:
Bytes (1-4)
# of bytes to write
Bytes (5 - (n+4)
Data to write

Seek File:
(Bytes 1-4)
Offset to move by
(Byte 5)
Initial location of pointer

Close File:
No Data

Delete File:
Filename to delete

Clear File (1 Byte):
00 = All
01 = User Files
02 = Read Only files
03 = Hidden files
04 = Preload/System Files

Format Volume Data
(1-511) bytes = Volume Name
22 EFSAC - File System Access 0060 0060 PARAMETER
DATA
00000004 TIMEOUT
READ
60
YES
PARAMETER (4 bytes):
0x00000000 = Open File
0x00000001 = Read File
0x00000002 = Write File
0x00000003 = Seek File
0x00000004 = Close File
0x00000005 = Delete File
0x00000006 = Clear File
0x00000010 = Format Volume

DATA (variable):
Open file:
Bytes (1-4)
00000000 = Default
00000001 = Read Only
00000002 = Hidden
00000004 = Preload/System
Bytes (5 - (n+4))
Filename

Read File (4 Bytes):
# of bytes to read

Write File:
Bytes (1-4)
# of bytes to write
Bytes (5 - (n+4)
Data to write

Seek File:
(Bytes 1-4)
Offset to move by
(Byte 5)
Initial location of pointer

Close File:
No Data

Delete File:
Filename to delete

Clear File (1 Byte):
00 = All
01 = User Files
02 = Read Only files
03 = Hidden files
04 = Preload/System Files

Format Volume Data
(1-511) bytes = Volume Name
23 GET_ALERT_STATE 0D13 0D13 RESERVED
STATE
00
00
TIMEOUT
READ
2
YES
RESERVED (1 byte): 00
STATE (1 byte):
00=Incoming call
01=Unread VM count
02=Unread SMS count
24 GET_DISPLAY 0D12 0D12 RESERVED
XSCALE
YSCALE
RESERVED
DISPLAYPATH
00
0000
0000
0000
TIMEOUT
READ
2
YES
RESERVED (1 byte): 00
XSCALE (2 bytes):
Xscale parameter
YSCALE (2 bytes):
Yscale parameter
RESERVED (2 bytes): 0000
Displaypath in hex
25 GET_PANIC - Read Information Out Of Panic Sector 000E 000E OFFSET
SIZE
0000
0000
TIMEOUT
READ
2
YES
OFFSET (2 bytes):
Offset from beginning of the location where Panic data is stored

Size (2 bytes):
0000=read entire 8k data
Valid range for number of bytes to read=0001 to 2000
26 GET_RX_AGC 0D0D 0D0D TIMEOUT
READ
2
YES
No data required.
27 GPIO_TEST - Read/Write GPIO Port/Register 0041 0041 ACTION
PORT
MASK
VALUE
DIRECTION
DATA
00
00
00000000
00000000
00000000
TIMEOUT
READ
2
YES
ACTION (1 byte):
00=Read
01=Write
02=Configure

PORT (1 byte):
00=MSM0
01=MSM1
02=MSM2
03=MSM3
04=MSM4
10=AP0
11=AP1
12=AP2
12=AP2
13=AP3

MASK (4 bytes):
Used when configuring pins with bit 0=pin 0 to bit 32=pin 32.
0=No change
1=To be configured

VALUE(4 bytes):
Used when writing to pins with bit 0=pin 0 to bit 32=pin 32.

DIRECTION (4 byte2):
Used when configuring pins enabled in MASK.
0b=Input
1b=Output

Data:
28 GPS_CHECK_AGC 0D02 0D02 TIMEOUT
READ
2
YES
No data required.
29 GPS_GET_CN 0D0F 0D0F TIMEOUT
READ
2
YES
No data required.
30 HOB 0D07 0D07 PARAMETER 00 TIMEOUT
READ
2
YES
PARAMETER (1 byte):
00=Save RF to HOB
01=Restore RF from HOB
02=Validate Barker
03=HOB State
04=Verify Restore
31 HS_USB 0D22 0D22 TIMEOUT
READ
2
YES
32 I2C 0D06 0D06 MODE
SLAVEADD
REGISTER
OPTIONS
LENGTH
DATA
00
00
00
0000
0000
TIMEOUT
READ
2
YES
MODE (1 byte):
00=Read
01=Write
SLAVEADD (1 byte): Slave address
REGISTER (1 byte): Slave register
OPTIONS (2 bytes): Options
LENGTH (2 bytes): Length of data to read/write
DATA depends
33 IMAGE_INFO 0D20 0D20 DATA TIMEOUT
READ
2
YES
34 INVM - Initialize Non-volatile Memory 0012 0012 LEVEL 00 TIMEOUT
READ
2
YES
LEVEL (1 byte):
00=Master Reset
01=Master Clear
35 KEYS - Perform Multiple Keypresses 0013 0013 KEY TIMEOUT
READ
2
YES
KEY (variable):
Array of Key codes
36 KEY_PRESS - Perform Single Keypress 0045 0045 ACTION
KEY
00
00
TIMEOUT
READ
2
YES
ACTION (1 byte):
80=Press
00=Release

KEY(1 byte):
Key code
37 KEY_TEST - Return Last Keypress 003F 003F TIMEOUT
READ
2
YES
No data required.
38 LDO_V_CTRL 0D10 0D10 STATE
LDO
00
00
TIMEOUT
READ
2
YES
STATE (1 byte):
00=Off
01=On
LDO (1 byte):
LDO to control
39 LDO_LVL 0D11 0D11 LDO
LDOVALUE
00
00
TIMEOUT
READ
2
YES
LDO (1 byte): LDO
LDOVALUE (1 byte): Value for the selected LDO
40 LEDS - Enable/Disable LEDS 003E 003E PARAMETER
DATA
00
TIMEOUT
READ
2
YES
LED (I byte):
00=Keypad backlight LED
01=Main display backlight LED
02=CLI display backlight LED
03=Red LED
04=Green LED
06=LCD Drv
07=GP1 Drv
08=GP2 Drv
0A=Camera Flash
0B=Touchpad
02=Funlights
41 LOAD_SYN - Load Synthesizer 0014 0014 CHANNEL
BAND
384
0
TIMEOUT
READ
2
YES
2
1
CHANNEL (2 bytes):
Valid range:
1 to 799
990-1023 (CDMA
AMPS 800 MHz)
25 to 1175 (CDMA 1900 MHz)

BAND 00 default
42 LONG_STAT - Return Status Data 0015 0015 COMMAND 00 TIMEOUT
READ
2
YES
COMMAND (1 byte):
00=default
43 MASWITCH 0D04 0D04 MODE 0000 TIMEOUT
READ
2
YES
MODE (1 byte):
0100=Get
0002=CDMA Mode
0001=GSM Mode
44 MSG_INJ - Send a SUAPI Message 0033 0033 TYPE
DEST_LENGTH
REP_LENGTH
DATA_LENGTH
DEST_PORT
REP_PORT
DATA
00000000
00
00
0000


TIMEOUT
READ
2
YES
TYPE (4 bytes):
Application ID

DEST_LENGTH (1 byte):
Length of destination port ID

REP_LENGTH (1 byte):
Length of reply port ID

DATA_LENGTH (2 bytes):
Length of SUAPI message data

DEST_PORT (variable):
ASCII string ID

REP_PORT (variable):
ASCII string ID

DATA (variable):
SUAPI mesage data.
45 MSG_RT - Set Routing Of SUAPI Ports 0034 0034 SELECTION
PORT_LIST
00
<320 bytes>
TIMEOUT
READ
2
YES
SELECTION (1 byte):
00=Changes take effect at next power up.
40=Changes are immediate.
80=Both immediate and at power up.

PORT_LIST (320 bytes max.):
List of port names to be set to intercept mode.
46 PING - Check the TCI Connection 0FFF 0FFF TIMEOUT
READ
2
YES
No data required.
47 PWR_OFF - Power Off 001E 001E TIMEOUT
READ
2
YES
No data required.
48 RAW_DATA DATA TIMEOUT
READ
BYTE_SWAP
2
YES
49 READ_ADC 0D01 0D01 PARAMETER 00 TIMEOUT
READ
2
YES
PARAMETER (1 byte):
ADC to read
50 RDELEM - Read Memory Element 0020 0020 ELEMENT_ID
REC
OFFSET
LENGTH
0000
0000
0000
0000
TIMEOUT
READ
2
YES
ELEMENT_ID (2 bytes):
Specifies the Element ID.

RECORD (2 bytes):
Specifies the record number of the element.

OFFSET (2 bytes):
Specifies the offset
in bytes
into the record. Set to 0 to read the entire record.

LENGTH (2 bytes):
Length
in bytes
of the data to be read.
51 RDWR_REG 0D14 0D14 DATA TIMEOUT
READ
2
YES
52 RDWR_SPI - Read/Write SPI Data 0021 0021 LENGTH
DEVICE
DATA
0000
00
TIMEOUT
READ
2
YES
LENGTH (2 bytes):
This field specifies the number of bits to write to the SPI device.

DEVICE (1 byte):
02=Read from GCAP
03=Write to GCAP

DATA (variable):
Array of bytes to send on the SPI bus (MSb first). If the number of bits to send (specified in LENGTH) is not an integer number of bytes
then the last byte must be padded with 0s.
53 RESTART - Software Restart 0022 0022 TIMEOUT
READ
2
YES
No data required.
54 RQ - Request Data 0026 0026 PARAMETER 02 TIMEOUT
READ
2
YES
PARAMETER (1 byte):
02=Smart Battery
55 SBSDY_LCK - Set/Check/Change Master Subsidy Lock Code 0035 0035 ACTION
CODE
00
<14 bytes>
TIMEOUT
READ
2
YES
ACTION (1 byte):
00=MSL status
01=Verify MSL code
02=Change MSL code
04=Verify service password

CODE (14 bytes):
Code format is detmined by ACTION.
56 SET_BAUD 41542B4950523D3131353230300D0A 41542B4950523D3131353230300D0A TIMEOUT
READ
2
YES
57 SET_PDM 0D0E 0D0E PARAMETER
VALUE
00
0000
TIMEOUT
READ
2
YES
PARAMETER (1 byte):
00=TXAGC
01=TRKLO
VALUE (2 bytes):
Pdm value to set
58 SET_RF_PWR - Set Transmit Power Level 002D 002D LEVEL 00 TIMEOUT
READ
2
YES
1 LEVEL (1 byte):
0 to 7 (CDMA-AMPS)
Tx output power in 2's compliment format (CDMA 800
1900).
59 SMARTCARD - Read Write Smartcard 003C 003C ACTION
CARD_ID
FILE
REC
OFFSET
LENGTH
DATA
00
00
00
00
0000
0000
TIMEOUT
READ
2
YES
ACTION (1 byte):
00 = Read form elementary file
01 = Write to elementary file

CARD_ID (1 byte):
This field specifies the card of the file that is being read/written.

FILE (1 byte):
This field specifies the name of the file that is being read/written.

REC (1 byte):
This field specifies which record is being read/written.

OFFSET (2 bytes):
This field specifies the offset
in bytes
into the record. Set field to 0 to read/write entire record.

LENGTH (2 bytes):
The length
in bytes
to be read/written

DATA (variable):
A byte array of data to write to the Smart card.
60 STELEM - Store Memory Element 002F 002F ELEMENT_ID
REC
OFFSET
LENGTH
DATA
0000
0000
0000
0000
TIMEOUT
READ
2
YES
ELEMENT_ID (2 bytes):
Specifies the Element ID.

REC (2 bytes):
Specifies the record number of the element.

OFFSET (2 bytes):
Specifies the offset
in bytes
into the record. Set to 0 to read the entire record.

LENGTH (2 bytes):
Length
in bytes
of data to be written.

DATA (variable):
A byte array of data
61 SUSPEND - Enter Test Mode 0036 0036 MODE 80 TIMEOUT
READ
2
YES
MODE (1 byte):
00=Test Mode
01=Normal Mode
02=Handset Test Mode
8x=Read Current Mode
62 TRAC_ACTIVE 0055 0055 MODE 00 TIMEOUT
READ
2
YES
MODE (1 byte):
01=Off to ST
02=ST to On
03=Off to On
63 TRAC_ENC_KEY 0D0A 0D0A MODE
DATA
00
TIMEOUT
READ
2
YES
MODE (1 byte):
00=Get
01=Set
Data: For Set mode only
64 TRAC_RPC 0D0B 0D0B MODE 00 TIMEOUT
READ
2
YES
MODE (1 byte):
00=Test
01=Production
65 TSB 0D21 0D21 DATA TIMEOUT
READ
2
YES
66 TSB_SIGNAL_LEVEL 0D23 0D23 DATA TIMEOUT
READ
2
YES
67 TST_CAMERA - Camera command 0061 0061 PARAMETER
DATA
02
00
TIMEOUT
READ
10
YES
PARAMETER (1 byte):
0x00 = Start/Stop Viewfinder
0x01 = Cature JPEG
0x02 = Capture MP4
0x03 = Set/Get Attribute
0x11 = View JPEG
0x12 = View MP4

DATA (variable):

Start/Stop Viewfinder (2 Bytes):
Set/Get (1/2 byte) [D7-D4]:
0x0 = Set
0x01 = Get
Action (1/2 byte) [D3-D0]:
0x0 Stop Viewfinder
0x1 = Start Viewfinder
0x2 = Switch to external viewfinder
0x3 = Switch to internal viewfinder
Media Type (1/2 byte) [D7-D4]:
0x0 = Still Image
0x1 = Video
Still Image Res (1/2 Byte) [D3-D0]:
0x0 = VGA
0x1 = QVGA
0x2 = SQVGA
0x3 = QQVGA
0x4 = QQQVGA
0x5 = CIF
0x6 = QCIF
0x7 = SQCIF

Capture JPEG (variable):
Action (1 byte):
0x00 = Capture Still Image
Filename (Bytes 1-257 variable)

Capture MP4 (variable):
Action (1 byte):
0x00 = Starts Video Capture
0x01 = Stops Video Capture
Filename (Bytes 1-257 variable)

Set/Get Attribute (2 Bytes):
Set/Get (Byte 1)[D7]:
0b = Set Attribute
1b = Get Attribute
Camera Attribute (Byte 1)[D6-D0]:
0000000b = White balance
Attribute (Byte 2):
0x00 = Reserved
0x01 = Sunny
0x02 = Cloudy
0x03 = Indoor Home (incandescent)
0x04 = Indoor Office (fluorescent)
0x05 = Automatic
68 TST_DISP - Test Display 0037 0037 PARAMETER
DATA
00
TIMEOUT
READ
2
YES
PARAMETER (1 byte):
00=Get display configurations
01=Select display
02=Display predefined pattern
09=Write register
0A=Read register

DATA(variable):
No data required to a variable array of data required. Data format is determined by PARAMETER.
69 TST_MMC 0C1B 0C1B PARAMETER
DATA
0000
TIMEOUT
READ
2
YES
PARAMETER (2 bytes):
0000=Read MMC Addr
0001=Read MMC Reg
0002=Read MMC Data
0003=Detect
0004=Read
0005=Write
DATA depends
70 VERSION - Read Software Version Numbers 0039 0039 TYPE FFFF TIMEOUT
READ
2
YES
TYPE (2 bytes):
FFFF= Release Label
71 WLAN 0C1F 0C1F PARAMETER
DATA
0000
TIMEOUT
READ
2
YES
PARAMETER (2 bytes):
0000=Raw Data Mode
0001=Download Firmware
0002=Reset IC
0003=Read MAC Address
0004=Write MAC Address
0005=Set attributes and tx
0006=Get attributes
0007=Start Rx Packet counter
0008=Query Rx Packet counter
0009=Start RSSI
000A=Query RSSI
000B=Power Down
000C=Scan and Associate
000D=Store phasing param
000E=Set # frames
000F=Adj Cal Offset
0010=MAPI Config
0011=Get Cal Values
0012=Scan All
0013=Set ELP Mode
0014=Write TI register
0015=Query TI register
0016=Write NVS Data
0017=Query NVS Data
DATA depends on parameter
72 WR_OTP 0E01 0E01 TIMEOUT
READ
2
YES
No data required.
73 WR_PBK 004B 004B LOCATION
FIELDSEP
NUMBER
FIELDSEP
NAME
FIELDSEP
TYPE
FIELDSEP
0000
000D
0000
000D
0000
000D
0000
000D
TIMEOUT
READ
2
YES
LOCATION (2 bytes): phonebook location
FIELDSEP (2 bytes):
Must be 000D
NUMBER (2 bytes):number to store
FIELDSEP (2 bytes):
Must be 000D
NAME (2 bytes): name for location
FIELDSEP (2 bytes):
Must be 000D
TYPE (2 bytes): entry type
FIELDSEP (2 bytes):
Must be 000D
74 XUPID - Get/Set Extended Universal Platform Identifier 0038 0038 ACTION
XUPID
00
TIMEOUT
READ
2
YES
ACTION (1 byte):
00=Get
80=Set

XUPID (4 bytes):
Specifies the XUPID (set only).
EOF