yashsingh1/xdaforums huggingface dataset:
[Samsung Infuse 4G] xxxSuperserieSxxx:
The new Dragon Mobile Assistant builds on top of the popular Dragon Go! directed search experience, adding a totally new, conversational design and the most popular personal assistant features. Dragon lets you speak naturally to access a wide range of content, and makes it easier to do everyday tasks on your phone when your hands are busy.

Dragon now offers completely hands-free controls, thanks to the new Driver Mode. When turned on, you can wake up Dragon with by saying "Hi Dragon," and the assistant will offer you more spoken guidance to help you out when you can't look at the screen. Dragon will also read your incoming messages aloud. Now you can access your favorite features in more places than ever before.
[Samsung Infuse 4G] hollywood528:
Thanks.. I'll check it out
[Samsung Infuse 4G] SteveCampsOut:
Only available on ICS & JellyBean! <sigh> :crying:
[Samsung Infuse 4G] bkmo:
I'm on jellybean, but my problem is "not available in your country" :mad:
[Samsung Infuse 4G] isaiahe97:
Dumb
[Samsung Infuse 4G] Nicod3mus:
Works pretty well on JB.... still playing with it but useful so far.
[Samsung Infuse 4G] jester12345:
hey bud. just do what I did. I searched in google dragon mobile apk. there are a couple links there it works on mine. I had the same issue not for your country or phone. but I have the apk and its sweet.

---------- Post added at 11:50 PM ---------- Previous post was at 11:46 PM ----------

if you are having trouble downloading it give me your email I will send apk.
[Samsung Infuse 4G] SteveCampsOut:
Yeah I just found today that it finally works on all available versions. :good:
[Samsung Infuse 4G] GutterGuppy:
Yes i found it also am going to give it a try. :cowboy:
[Samsung Infuse 4G] GutterGuppy:
this is an interesting program to say the least. Doesn't always recognize what i am saying but it works fairly well, And yes saying HI DRAGON is kinda weird for sure.
[Samsung Infuse 4G] SteveCampsOut:
Well it works much better on my Toshiba Thrive. It has a terrible time recognizing my voice on the Infuse. I'm having better luck with Skyvi! :rolleyes:
[Samsung Infuse 4G] unrudh:
apk

Any chance I can get an apk from someone. I'm a "Not available in your country" case too.
[Samsung Infuse 4G] xxxSuperserieSxxx:
PM sent...
[Samsung Infuse 4G] iKoyy:
Hey guys,

The app is not available in France too, could someone help me to get the apk please ?

Cheers
[Samsung Infuse 4G] xxxSuperserieSxxx:
PM sent..
[Samsung Infuse 4G] iKoyy:
thanks :)
[Samsung Infuse 4G] unrudh:
Thanks

Thanks a lot, man. :)
[Samsung Infuse 4G] pickoss:
Nice)
[Samsung Infuse 4G] villeda:
X2
[Samsung Infuse 4G] tinoucas:
I'm in France too, can someone help me get this apk too please ?
[Hardware Hacking General] autoprime:
*RESERVED*
[Hardware Hacking General] E:V:A:
<< Reserved For Something >>
[Hardware Hacking General] bhundven:
Wow autoprime! Impressive! I need to start digging through the nv on my SGH-I717 now!

So much for thinking gpio's were a pita.
[Hardware Hacking General] rbeavers:
Got a txt file?

Thanks for the Post!
[Hardware Hacking General] autoprime:
OP has been updated with lists to each NV item section and each category.

I have also included a text file with the complete NV list.

:good:
[Hardware Hacking General] ondrong:
insome phone i have found this NV , are u have more info about this area

txs
[Hardware Hacking General] tester420:
Read Location..

Excellent list!

Not sure if this question could be entertained here (if not, Mods, plz Del).

I would like to know the location of these items. Here is the issue:

On SGH-T999 (Tmobile SGS III), Using EFS Explorer, export 550 NV Item and change it and write it back to phone. Reboot, Refresh phone in EFS Explorer and the item reads contain the changed values. Ok.

Now, use RF NV Manager and read the same 550 item. It will be different. And changing values and writing in RF NV Manager won't stick (subsequent reads show previous value).

By the way, the Phone (*#06#) actually displays what RF NV Manager reads.

What I am trying to understand is:

Where is EFS explorer writing the items to?

Where is RF NV Manager reading the items from?
[Hardware Hacking General] autoprime:
Are the decimal values the actual NV item numbers you are talking about? 11xxx and 51xxx? If so, these are "user-defined" NV items. NV items that currently fall between 7232 and 65337 are in this group. Qualcomm does not define these items.

To quote Qualcomm:

For example, my SPH-L710(Sprint Samsung Galaxy S III) has NV items in the 10xxxx range. Opening them up in a hex editor.. I was unable to narrow down what these were used for exactly.

Unfortunately I do not have any additional info on these at the moment. They are indeed on my radar and I will be keeping an eye out for any usable info. I will add anything I find. If anyone else has additional info on these items, please share with the rest of us.

very good question but unfortunately I do not have the answers! I was about to reference the issue I had with this situation.. but then realized it was with you! haha. So I assume the issue is still present and your IMEI is still not valid?

Just curious, have you been able to get your hands on another device.. or gotten together with other SGH-T999 users to see if this situation holds true with others? I'm wondering if something got corrupted... or if this is just the "norm". Having experience with only CDMA devices myself, I am unable to weigh in on that exactly.

Have you tried another tool besides the official Qualcomm stuff... such as DFS? (sorry if we previously discussed this.. I know we tried a lot)

I know you can read NV items and RF NV items in DFS as well as write them back... wondering if you could get around the error.

If anyone else can replicate this experience(editing NV item in QPST EFS Explorer but still no real change) please share.

*little update*

I am able to read NV items via RF NV Manager... I can view NV item 550... edit it... write it... and after a reboot I can view the change. No write errors.. NV change sticks etc. NV items in both EFS Exp and RF VN Manager seem to be one and the same.
[Hardware Hacking General] tester420:
I am inclined to think that "550" is Not in user space. However, a bit confused as the EFS explorer edits of the so-called "550" can be saved (like I mentioned previously). I think the NV ITEM in question is "UE_IMEI" which is most likely 550 in Decimal (Hex: 226). Again, is EFS explorer reading a different set altogether?

Yes Sir, it is me back on this topic (never left actually) :highfive:. And yes, it is still a puzzling issue. One of these days the solution might surface....

No, I have not been able to get another device to test out things and I haven't approached others yet.... will start a thread and feed the findings here. What we need is the GSM version. You got the CDMA and they work a bit differently (possibly someone can correct me here with specifics) because CDMAs don't rely so much on the IMEI. Instead the ESN and other (details???) make up for uniqueness on the network.

Here is what I have tried so far:

EFS Explorer - The "first" read contained the same data as shown using "*#06#. So, plugged in correct data and wrote back to phone. Changes are saved. But, "*#06# shows the same old info.

CDMA Workshop Demo - Reads "proper" data -as in, not the 550 I modified using EFS explorer method. (would love to get my hands on a latest full version). It reads but can't write as it requires registered version.

NV ITEMS READER WRITER - (variant of CDMA WS) - reads and outputs the "proper" data and writing back reports successful but changes not saved anywhere.

DFS 4.0.1.1 - (NV read range [550-551]) reads the "proper" data and not my modified version. Writing is not working (again, demo) as "process collapses" after modifying the Hex > apply > write. End result, can't store.

QXDM - (after SPC & PWD accepted) Request NVITEMREAD ue_imei > results "proper" imei. Request nvitemwrite ue_imei "0x--, 0x--, .. .." > Unable to build buffer!

RF NV Manager - Reads "proper" data under UE_IMEI like other tools but writing back displays no message and changes are not saved.

Some other tools (CdmaDevTerm, Qmat..etc.) all are unable to write. But, they are reading the "proper" data and not the modified one.

So, why EFS explorer is reading different data is a big question.

Yes, it would help to find out if this is just isolated to me or a normal phenomenon.

Also, it might be useful to mention that the phone is still Locked and no unlocking procedures were performed / tested. Could that have anything to do with the access to the right NV areas (I am inclined to think so)? We need some experts to weigh in here...

Sending SPC 000000 and PWD FFFFFFFFFFF.. in QXDM, DFS and other tools result in "Device Unlocked" or "accepted"... etc. type messages. Of course, this is not the same as network / sim unlocking...

>> Autoprime, Check again and this time, change to a different number in EFS explorer > write. Now, read in RF NV Manager...
[Hardware Hacking General] moparfreak426:
Thank you for this since i plan on eventually getting a sammy gs3

Sent from an Apple killing JellyBean
[Hardware Hacking General] SaHiLzZ:
Hello,

I am trying to modify item 1877 on S3 i747 to 115868544, but the values are reset on restart. I verify this by re-reading the values after restart.

I have tried QXDM NV Browser, RF NV Manager, and NV-Items-Reader tools. All of them display same behavior. Is there any other tool I can use to make this happen?

Thanks!
[Hardware Hacking General] DjGeNeSiS:
Same here!

I am reading the NV parameters, I am changing them but I can't seem to be able to write them back. Does the device have to be rooted?

I will try what was suggested by the poster above and will report back
[Hardware Hacking General] jafarsadiq:
sir give me your gmail ID

sir give me your gmail ID
[Hardware Hacking General] hmartinus:
Hi,

I've been messing with my phone and I think it's on test mode now, it can't activate the radio if using NV mode. I notice there are some problem with most Verizon phone especially LG that might get into test mode all of sudden, and there is ftm_mode in nv item...I want to now what value that should be written in ftm_mode...mine says 0x00...
[Hardware Hacking General] T_ADD:
Check these files.

https://www.dropbox.com/s/22hcwxasqkznli3/80-V3722-1 Rev.D Select radioOne RF NV Items.pdf

https://www.dropbox.com/s/yl89ftyqwir8hvh/80-V1294-1 R CDMA DMSS Serial Data ICD.pdf
[Hardware Hacking General] enigma99a:
Is there a way to connect to this interface directly with an Android phone without using an external USB cable?
[Hardware Hacking General] packer001:
I can confirm the write problem with the t999. I can't write to nv item 550. Ive tried NV items reader writer, QPST and the CDMA Workshop (3.9.0 Full version).

In all instances the nv item seems to be written however on the actual phone there is no change.(*#06#)

I'm also not able to reset the device through any of these applications only through the actual phone.

I've also successfully written the meid on a GS3 (L710) successfully with cdma workshop.

I'm stuck with the t999 I've tried different android versions, root or stock makes no difference.

Hope this info helps in finding a solution.
[Hardware Hacking General] 12manytimes:
Access denied

Hello I had a few questions in regards to NVitems that show "access denied" I have an LG730 im trying to pull passwords from but the NVitem these passwords are stored on show access denied when i use an nv reader (cdma 3.9) My question is how are these locked? and is there a way to access that information.

Thanks
[Hardware Hacking General] enigma99a:
Generally, most devices work by just echoing the AT commands to /dev/smd0. So with two terminals open, # cat /dev/smd0, and then the other, # echo -e 'AT\r' > /dev/smd0

Software like TEMS pocket, Anite Handy, Qualipoc etc all use diag locally, so they have discovered a way on all devices to do DMSS (QDL). All I need to do is spend 5k or get a firmware somewhere so I can reverse engineer it.
[Hardware Hacking General] Shandry:
Great work!

How have you exported NV items from Optimus G? Even with descriptions? Thank you.

39939 helped me with 3g data on non Sprint carriers.
[Hardware Hacking General] E:V:A:
[ From a Chinese site document: 80-U0434-1 Rev. A ]

Why some of the NVs cannot be edited from Win Mobile interface?

Additionally, many other NV items may either

a) require you to enter the SPC password before changes can be accepted,

b) be disabled by modem firmware (like for example memory peek/poke operations).
[Hardware Hacking General] zykhan:
Hi,

I am using Optimus G, I tried to edit NV 02508 inGPRS to enable EDGE FEATURE SUPPORT, but can't save the value,

using QXDM to edit. is there any way to store the value.

Hi, can any one share the Idea to modify NV item for LG F180L ,

thanks.
[Hardware Hacking General] E:V:A:
...If your hardware can support it!

There are QC proprietary AT commands that can store NV items, but they're not publicly documented and I'm too lazy to look it up for you. Perhaps someone else can chime in on the details.
[Hardware Hacking General] E:V:A:
Okay, I think we need some NV information/theory update here. (This is not it.)

1. From now on, before posting more NV items, please post the exact model of your phone, and try to find out what is the internal modem used. That is, the Qualcomm baseband chip model number. (E.g. MDM9200, MDM9625, MSM8960, etc.)

2. What software and version you used to extract NV items.

3. Apparently NV-items above 7232 are considered by Qualcomm as "user-defined NV items", i.e. OEM specific. This means that Samsung will have one set, whereas Nokia and Huawei another set, possibly with the same numbers, but completely different meaning! [I'm not sure how deep this goes, if that also means each model (from same OEM) can also have same NV-item numbers with different meanings?]

4. I'm still looking for the source, but I read somewhere that there are different sets (of copies) of NV-items stored in BP/CP memory versus what's stored on "disk" (in several different eMMC partitions). This make sense, but things were more complicated AFAICR. One set was encrypted, one was not, these sets are often copied and flip-flopped from several modem related partitions, like FSG, MODEMST1, MODEMST2, EFS etc.

(Check El Grande Partition Table Reference for further info.)

This would explain why certain programs report changes that "sticks" while others doesn't. In particular the EFS, should take precedence... Some programs just parse memory and others partitions, with funny results.

5. RF NV Item Manager (part of QPST) is deprecated since July 2008. This means that it is not able to load/read QCN files that are created with QPST versions later than 2.7.310.

6. We should list the currently available software that can be used to "play with NV items". Including how they read/write NV items and their compatibilities and handling of other NV classes. (Test list in below quote seem a good start.)

7. How are certain NV items protected? [Deliberately vague and very open ended question.]

8. How does SPC/PWD relate to NV-item locking (above), if at all?

9. What's the exact relationships between EFS files, NV-item files and the various modem related partitions?

10. How and where are the EFS file permissions being set?

Aha.

See above.

See above.

...and...

That's right, but you don't need any $ for that.

1) They're probably using the same protocol as the phone AP is using talking to CP, which is usually through a shared memory device. An on-chip memory or possibly eMMC partition?

2) The QMI raw interface when in DIAG/DEBUG/DLOAD mode (or whatever you feel like calling it). This interface can also be diverted to run over USB as we all know. I think it's really the same interface as above...

The problem we have is understanding how the protocol and MUXing is done. I.e. How can we find the local device to use as SHM (shared memory) raw device? (or is it enough to send raw bytes to AT smd0 port when in a different mode?) I think this has already been solved elsewhere... [I'm a bit rusty on those details, so please correct me if I'm wrong here.]

Great!
[Hardware Hacking General] E:V:A:
There is a typo. It should be 65537 or Possibly even 65536 (0x10000).

And please fix post #27 to reflect values up to 70282. There are many other updates as I see the post "titles" doesn't reflect your changes/additions. This is also true for the same ones in OP...

From my current understanding, items between 7232 and 65535 (inclusive) are used in the "newer" files in EFS: "/nv/item_files/rfnv/nnnnnnnn" and probably mostly reserved to OEM's. Thus not a location in one file, but each in it's own. Second, I think that NV's above 65535 are again reserved for Qualcomm's later modems. Please correct me if I'm wrong.

Close enough, here's the clarification:

I have a further range of 20310 - 20898... and fix post #27 to reflect values up to 70282. + OP
[Hardware Hacking General] kalanir:
Dumb Move

Is there anyone who can PM me or post their complete Sprint LG Optimus G (LS970) NV Items for me? I just totally messed up my phone when I flashed the nv items for a different LG Optimus on accident. Is there anyone who can help me? I have no radio function whatsoever. No signal at all
[Hardware Hacking General] mejiachach:
SCH-R530M

Need NV Range (Dec): and Range (Hex): galaxy s3 lost IMEI programming trouble?
[Hardware Hacking General] lir1981:
Is there anyone who can PM me or post their complete Sprint LG lusid 4g (vs840) NV Items for me? I just totally messed up my phone when I flashed the nv items for a different LG lusid 4g on accident. Is there anyone who can help me? I have no radio function whatsoever. No signal at all: Плачу:
[Hardware Hacking General] !Led*Eyes!:
VZW GS4 on ME7 packet access DENIED

Hey I have the SCH-I545 on ME7 and im rooted fine but when I put my phone in Diag mode, it wont read the lock code and says it needs a 16 digit passkey?? ( obviously the stock one doesn't work nor the sprint one ) Ive been digging through modem.bin hex packets and still NO LUCK. I connect to DFS and it wont read certain NV items ( which im assuming have my keys in it) and i cant find my lock code OR my " 16 digit passkey ". Ive been digging through threads EVERYWHERE and still no luck. I've tried QPST, Revskills, cdma workshop, efs professional and DFS. I need help in a bad way!! Thanks in Advance and i will buy someone a beer!!! :eek:
[Hardware Hacking General] AlpineMan:
Did you try 2009031920090615 as the 16 digit key?
[Hardware Hacking General] !Led*Eyes!:
Yeah I finally found it on here... Just gotta dig dig dig! Thank you though I appreciate the reply!
[Hardware Hacking General] udg21:
LG730

could someone tell me how to read the HA AAA password from a LG730?
[Hardware Hacking General] gpz1100:
^^Try 466.
[Hardware Hacking General] kocoman:
has anyone tried it?
[Hardware Hacking General] chinawro:
Could you help me,please?

I got sprint moto x in Britain. I want to unlock it for the UMTS bands. is there anyway possible to unlock this device without having to call sprint. When I pop in a gsm sim card shows"invalid card". I choose GSM/UMTS, it doesnt prompt me to enter the sim network unlock key like other androids do..is there a dial code perhaps to make the network key entry prompt pop up?Could you help me,please?
[Hardware Hacking General] !Led*Eyes!:
yeah try dialing either ##debug# or Ill try and find the link to the dialer codes for you but in oder to get the unlock key without contacting spr you will need the MSL or SPC code and a program called DFX or CDMA Workshop to read your NV list and find the packet with your code in it... MOTO has a generic Unlock code if you search im sure you can find it but as far as provisioning goes, with the right dialer code you should be able to do it no worries. Sorry it tool so long to get back ive been out of country. send me a message if you need any further help and ill do what i can about finding you alink.
[Hardware Hacking General] blizzy13:
anyone know how to hack the verizon note 2 to get t-mobile lte band added to it
[Hardware Hacking General] asics79:
RF_NV_HELP!!!!!

Originally Posted by asics79

Hello queberican, the first thing you do best wishes for a happy new year.

I need wheel help, I have an LG E610 "L5" and I have to restore the IMEI.

I tried the program QPST: RF NV Item Manager that can read all the details of the smartphone but at the moment to rewrite the IMEI send me the error message: "NVManager to phone :: write (const string comport, const vector <NV Items> & NV ITEMS, bool throw exeption. Unable to write 'The IMEI NV EU' to the phone (parameter is write-protected and Thus read only).

can you help me solve this problem? while waiting for your reply I wish you a good day. Francesco from Italy

P.S. I tried to unlock all write permissions with root explorer but when I open again RF_NV keeps giving me the same error. the phone is in the root and with permission from superSU PRO.
[Hardware Hacking General] asics79:
Problem on lg e610 "l5"
[Hardware Hacking General] pipinsama:
pls help imei

I android phone china (qualcomm), dual sim card ( Sim 1 Wcdma, Sim 2 Gsm)

I want to repair IMEI,,after flas custom rom.

I succeed write IMEI 1 (as I know, 00550 is for IMEI 1)

Please tell me, what number to write IMEI 2??
[Hardware Hacking General] d3v147:
I searched quite a bit, but cant find a way to access NV items above 65536? Is there a special utility or set of AT commands to do this?
[Hardware Hacking General] han1728:
NV item 6828 LTE BC config

does anyone know what does values inside this item 6828 mean? depends on the value I found out that it only camps on to the certain LTE band. but I don't know what does value like16779290 are composed of. if anyone knows, or where I can find the meanings of the values here greatly appreciated.
[Hardware Hacking General] Digital Helper:
Dears,

How can I get the Code of LTE-TDD Band 40 for my iPhone 5s??

There is many Codes for LTE-TDD Band 40 I don't really know which one of them ??

please help me ASAP.
[Hardware Hacking General] terminator1983:
I have few questions about NV items list.

How can i write the inactive items.

No 2824 "Device Serial Number" is it where the device serial number is written(About phone/Status/Serial number).

Can i write the Hw version and rf cal date of the device with nvitems.

I am asking this because my device

Rf cal date is not written

Hw version is showing not acti

and serial number changes to strange numbers when i install a custom rom like CM 11 but its fine no stock firmwares.

I did got the rf cal date (571) and device serial number the nv items of my phone but both the nvitem are showing ''Inactive item''.

My device

S4 i9505
[Hardware Hacking General] s_u_n:
Droid Maxx unlock

Perhaps now I am on the right thread.

The Droid Maxx and the Droid Ultra are GSM locked till someone activates the device first on Verizon network in the US.

As a result, you cannot use this device if it is brand new, never activated and switched on outside the US.

This is what I have gathered so far after interacting with chaps at Motorola and Verizon.

More so, employee editions have been reported to have more restrictions.

Now, the NV hack which worked for Razr HD talks about flipping a 01 to 00 at location 8322.

This one is already on 00 on the Droid Maxx.

I have so far got Radio Comm installed and working fine on my Windows 7 64 bit.

What tool is best to take a backup of the NV values before I edit anything?
[Hardware Hacking General] maskelisuvari:
No 2g signal

I have brand new Oneplus One.My problem is that i cannot get 2g signal.I flashed many modems,roms,unlocked the bands , i tried *#*#4636#*#*.But no success.I know that i have full 2g reception in my area but my mobile cannot find it,i have 3g signal by the way.I flashed color os 2.0.14 and took gsm only from *#*#4636#*#*,it finds the 2g signal couples of seconds then gone again.I think my modem bans the 2g signal somehow.Is that possible to activate 2g signal by using these codes?Your help will be highly appreciated.