Wednesday, February 10, 2010
Measure your battery capacity and % rundown
More than a year ago - and now I finally did the mortscript I was talking about in my first post related to battery issues. Please lookup the related thread I started at xda-developers. Since I have no E72 any more but noticed the crappy battery levels back that time, I am interested to see the results. So if anyone cares to measure it, please contact me at xda-developers. Full lit display should draw 150mA (see my previous posts) so with a battery of roughly 900mAh it should be empty in 6 hours - check it out.
Saturday, January 23, 2010
Back to my HTC Tornado :-)
I could not believe it when I went back to the Tornado Forum before Christmas last year - there is SDHC support for this little gem finally. Took up the challenge and cooked my own ROM with SDHC support and now have back my Tornado which I should never have left. See here: http://forum.xda-developers.com/showthread.php?t=619510
Vox is a very nice device with lots of support and very convenient, just too heavy. The KS20 which I bought recently was a sidestep to the WM6 professional - but what a waste due to the very poor audio quality (not the noise and volume like for the E72 this time, but the frequency response), see this: http://www.gsmarena.com/lg_ks20-review-208p6.php
Vox is a very nice device with lots of support and very convenient, just too heavy. The KS20 which I bought recently was a sidestep to the WM6 professional - but what a waste due to the very poor audio quality (not the noise and volume like for the E72 this time, but the frequency response), see this: http://www.gsmarena.com/lg_ks20-review-208p6.php
Monday, February 9, 2009
My new device (a used + worn-out HTC S710/VDA V)
Well - I gave up on the weight issue and returned to an HTC device. I could get hold of a cheap used and worn out Vodafone VDA V (branded HTC S710 aka "Vox"). This now works as expected - despite I have to say that the noise level is still higher than on my old devices. Since the maximum volume is however high enough to compensate for a little attenuation in the music-adapter to get the noise to a low-enough level for the physical environment, it does not matter much.
If anyone gets hold of information how the BenQ E72 headset volume can be increased beyond the poor original state - let me know, please - I am really willing to give it another chance then. You can contact me via this blog or in the linked forums on the left side - my user name is tobbbie there.
.
If anyone gets hold of information how the BenQ E72 headset volume can be increased beyond the poor original state - let me know, please - I am really willing to give it another chance then. You can contact me via this blog or in the linked forums on the left side - my user name is tobbbie there.
.
Monday, January 12, 2009
Good bye my little friend...
Now that the device showed it cannot serve as a good music player, I have finally returned it to the vendor. I very much regret this, as there is no other device on the market that fits my simple scheme still.
- Music Player (no noise at low volume, still high volume possible)
- SDHC compatible
- no touchscreen
- Windows Mobile
- WiFi
- light-weight (less than 100g)
- and yes - it has to work as a mobile phone too :-)
Tuesday, January 6, 2009
High noise level :-(( on headphone
Now that finally I have all elements together to actually use the device for its main intended purpose (most of the time it will be used as a music player) I had to discover that the base-level of noise is unacceptable high. It is impossible to listen to music with low volume, e.g. in a silent environment, as simply the base noise is filling your head. This of course depends on the sensitiviy of your headphones, but is already audible on my Koss Porta Pro (60 Ohms) and unacceptable on my CX-300 (16 Ohms). On my old Tornado (and even my Amadeus) it was just audible with the CX-300, but not with the Porta Pro.
I am much disappointed and only a very slight hope remains to increase the volume on one hand (the max volume is rather low compared to my Tornado) and decrease the sensitivity of the headphone on the other (serial resistor).
Sigh...
Seems to develop to a never ending story with this device :-( and I suspect that there will not be a happy end.
[Edit 20090108]:
I have not found any option in the registry for increasing the sound volume when the headset is connected. The sometimes reported action to set the valule in HKCU\ControlPanel\Volume to Volume=0xffffff is nothing but the place for the System Volume that is adjusted with the volume keys anyway. Even snapshotting the registry with and without headset connected and comparing these has not revealed an option.
As the noise level cannot be changed - and the volume not increased, I fear that was my short love story with this little gadget :-(
It still fits for anyone that has a lower sensitivity headset and does not require higher volume sound level there.
.
I am much disappointed and only a very slight hope remains to increase the volume on one hand (the max volume is rather low compared to my Tornado) and decrease the sensitivity of the headphone on the other (serial resistor).
Sigh...
Seems to develop to a never ending story with this device :-( and I suspect that there will not be a happy end.
[Edit 20090108]:
I have not found any option in the registry for increasing the sound volume when the headset is connected. The sometimes reported action to set the valule in HKCU\ControlPanel\Volume to Volume=0xffffff is nothing but the place for the System Volume that is adjusted with the volume keys anyway. Even snapshotting the registry with and without headset connected and comparing these has not revealed an option.
As the noise level cannot be changed - and the volume not increased, I fear that was my short love story with this little gadget :-(
It still fits for anyone that has a lower sensitivity headset and does not require higher volume sound level there.
.
Monday, January 5, 2009
Replacement batteries, compatibles + offers
While not really needing it now (I have yet to observe real-life behavior of the battery when I will use the device on a daily base) - it is still good to know the options you have :-)
So checking the various ebay offers, it seems that the following BenQ models share the same battery: C31, S81, E81 and E72 (Kyocera E4000). At time of writing the following ebay shop delivers the best price.
So checking the various ebay offers, it seems that the following BenQ models share the same battery: C31, S81, E81 and E72 (Kyocera E4000). At time of writing the following ebay shop delivers the best price.
Sunday, January 4, 2009
Steer your charging options
[updated 20090105, see below]
I remember that for the HTC Tornado there was a setting to disable USB charging - to allow the battery to continue discharging while connected via USB (useful or not is another topic - see further down). As long as the device is switched on, the USB and Battery drivers of the Windows Mobile operating system have control of the charging functions. When switched off, the "hardwired" functionality of the BootROM code takes over. The following only affects the options while the OS is active.
My search in the extracted modules for registry options has revealed in the usbotg.dll the elements:
As written further down, my (refurbished) device was delivered with a non BenQ charger (a Blackberry with exchangeable plugs) - so I continue to use my old HTC Tornado charger which also connects via miniUSB. The systematic (lengthy) investigation has shown the following logic for the registry variables above:
Now the question "is it useful to discharge the battery (completely) before charging again"? After consulting many resources around the web I strongly believe "no". When busy with the batterylevel problems of the device I have collected some links - make your own decision, see here: 1, 2, 3
I know that some are keen to get hold of the Flash animated homescreen that is present in the Asian ROMs (and I suspect that most parts can be extracted from an available - yet incomplete - dump) but mind that everything that happens automatically on your device will need the CPU and battery. So I recommend reading this article at wmexperts.com.
[updated 20090105:]
After running down the battery completly, I have discovered that the charging current (get it from HKLM\System\State\Battery "ChargingCurrent" value while charging) is limited to roughly 450mA when connected via USB (also for the HTC Charger) - the USB standards allows a maximum of only 500mA anyhow. When connected to an AC Adapter (that is recognized by the system as such - e.g. my Blackberry AC Adapter) then the current draw is higher - I have seen 650mA when the battery was recovering from "emergency switch off".
The lowest voltage until which the battery is used in the E72 is very low compared to my HTC. The E72 uses the battery down to 3.356 V, while the HTC switches off already at 3.570. This may sound like big difference, but it is not in terms of capacity when you look at the discharge curve for LiIon rechargeable batteries. The battery resources I have seen on the web (see links further up) usually recommend not to use a battery below 3.6V to preserve a good lifetime.
I remember that for the HTC Tornado there was a setting to disable USB charging - to allow the battery to continue discharging while connected via USB (useful or not is another topic - see further down). As long as the device is switched on, the USB and Battery drivers of the Windows Mobile operating system have control of the charging functions. When switched off, the "hardwired" functionality of the BootROM code takes over. The following only affects the options while the OS is active.
My search in the extracted modules for registry options has revealed in the usbotg.dll the elements:
- USBChargeEnable
- USBForceCharge
- ACCurrent
- USBCurrent
As written further down, my (refurbished) device was delivered with a non BenQ charger (a Blackberry with exchangeable plugs) - so I continue to use my old HTC Tornado charger which also connects via miniUSB. The systematic (lengthy) investigation has shown the following logic for the registry variables above:
- none present: device charges from any source (just like when switched off)
- Charging via USB connection cannot be disabled without also disabling the HTC AC Adapter (USBForceCharge = 0 disables both), but
- charging via HTC AC Adapter can be disabled, still with USB charging possible (set USBChargeEnable = 1; if you want it the other way round - it will not work, I have tried all options)
- Charging via Blackberry AC Adapter can be configured independently of the USB Charging (and follows an understandable logic), I suspect the same will also apply for the normal BenQ/Kyocera AC Adapter.
- ACCurrent = 0 disables the charge via the (BB) AC-Adapter
- USBCurrent = 0 disables the charge via the USB cable of the linked PC
Now the question "is it useful to discharge the battery (completely) before charging again"? After consulting many resources around the web I strongly believe "no". When busy with the batterylevel problems of the device I have collected some links - make your own decision, see here: 1, 2, 3
I know that some are keen to get hold of the Flash animated homescreen that is present in the Asian ROMs (and I suspect that most parts can be extracted from an available - yet incomplete - dump) but mind that everything that happens automatically on your device will need the CPU and battery. So I recommend reading this article at wmexperts.com.
[updated 20090105:]
After running down the battery completly, I have discovered that the charging current (get it from HKLM\System\State\Battery "ChargingCurrent" value while charging) is limited to roughly 450mA when connected via USB (also for the HTC Charger) - the USB standards allows a maximum of only 500mA anyhow. When connected to an AC Adapter (that is recognized by the system as such - e.g. my Blackberry AC Adapter) then the current draw is higher - I have seen 650mA when the battery was recovering from "emergency switch off".
The lowest voltage until which the battery is used in the E72 is very low compared to my HTC. The E72 uses the battery down to 3.356 V, while the HTC switches off already at 3.570. This may sound like big difference, but it is not in terms of capacity when you look at the discharge curve for LiIon rechargeable batteries. The battery resources I have seen on the web (see links further up) usually recommend not to use a battery below 3.6V to preserve a good lifetime.
Saturday, January 3, 2009
ROM dump + extraction of files
Hi - despite you can find all what I will write below also at XDA Developers (see related links on the left side) - It took me some time to understand which program does what and which are bare necessity and which are the "nice to have" things (which I do not yet care about).
As already mentioned in my notes about the bootloader, you just need two sets of tools that will do the jobs of dumping the ROM from the device (itsutils) and then extracing (WM5editrom) all the files from the just dumped ROM image to your PC.
Dumping the ROM from the device:
This is done with the itsutils from "itsme". There is one important thing to care about when doing the dump (and it must be stressed - as other wise the dump will be incomplete). OK, so now the step-by-step action list:
As already mentioned in my notes about the bootloader, you just need two sets of tools that will do the jobs of dumping the ROM from the device (itsutils) and then extracing (WM5editrom) all the files from the just dumped ROM image to your PC.
Dumping the ROM from the device:
This is done with the itsutils from "itsme". There is one important thing to care about when doing the dump (and it must be stressed - as other wise the dump will be incomplete). OK, so now the step-by-step action list:
- Your device must be "application unlocked". If you do not know what that means - stop here and get a little more comfortable with what Windows Mobile is about.
- Download the itsutils (sometimes also called XDA-Utils) from the link above.
- Extract them to a working folder on the PC.
- Connect your device via Active Sync if it is not linked yet - wait until sync is complete.
- Now we need find out what file-volumes are known at the device. Get into a CMD window on your PC in the directory where you have extracted the itsutils. Enter the command "pdocread -l" (no quotes) and confirm on your device that it may run an "unknown" program. You will see a list of output similar to this:
Copying F:\Share\_Smartphone\ROM + Tools\itsutils\itsutils.dll to WCE:\windows\itsutils.dll
I have issued the command above for my Tornado device - not the E72 (which is in a "lets see how long it survives in standby without charging" test), so it will look different, but the important thing to notice is the length of the part02 partition (marked in bold red) above. You need this for the command to actually dump the ROM in the next step.
36.00M (0x2400000) TrueFFS
| 2.06M (0x20fc00) Part00
| 2.69M (0x2b0000) Part01
| 31.25M (0x1f40000) Part02
19.00M (0x1300000) TrueFFS
| 2.06M (0x20fc00) Part00
| 2.69M (0x2b0000) Part01
| 31.25M (0x1f40000) Part02
3.75G (0xf0300000) DSK1:
| 3.75G (0xeff00000) (label of your memory-card)
STRG handles:
handle 0fb7c76a 3.75G (0xeff00000)
handle 0fb237ee 18.98M (0x12fc000)
handle 8fb7ca86 31.25M (0x1f40000)
handle afb7c88a 2.69M (0x2b0000)
handle efb7c866 2.06M (0x20fc00)
disk 0fb7c76a
0 partitions, 0 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
disk 0fb237ee
2 partitions, 2 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
disk 8fb7ca86
2 partitions, 2 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 ee 22 02 01 0a 27 03 95 07 06 05 a0
disk afb7c88a
2 partitions, 2 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 ee 22 02 01 0a 27 03 95 07 06 05 a0
disk efb7c866
2 partitions, 2 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 ee 22 02 01 0a 27 03 95 07 06 05 a0 - Now enter "pdocread 0 (your-value-here-no brackets) part02.dump" like I did here:
pdocread 0 0x1f40000 part02.dump
You see above that it starts to copy date from the device to the file. This takes several minutes - you can watch the file grow in the Windows Explorer if you like to - so be patient until you see the prompt again.
CopyTFFSToFile(0x0, 0x1f40000, part02.dump)
That's it for extacting the ROM - nothing more to do if you just want to share it with others. Put "part02.dump" in a ZIP/RAR and label it with what you know about your device (Kyocera or BenQ - Windows Mobile Version - ROM Version from "Settings - About: Image Version, Build Date, Build Time). - If you want to dig deeper a little you may want to extract the contents of the just dumped ROM image. For this you need the WM5EditRom tools (imgfs_tools). Extract them in a different folder (e.g. aside the itsutils) and move the part02.dump file there as well.
- Now enter again a CMD window - this time in the folder where you have extracted the imgfs_tools and moved the part02.dump. There enter "prepare_imgfs part02.dump -nosplit" resulting in:
Searching for IMGFS start... Found at 004C0000
This has created two files: imgfs_raw_data.bin and imgfs_removed_data.bin which is empty. The first is now the complete ROM filesystem and needs to be further decomposed with the next command.
Dumping IMGFS ...
Done!
Again mind that the examples above are not originating from an E72/E4000 (WM6) but from an HTC Tornado (WM5), so your filesizes and addresses will be drastically different. - So now the last command for decomposition: Enter "viewimgfs imgfs_raw_data.bin > viewimgfs-output.txt" (no qoutes) on the commandline and press enter. As the command output is redirected into a file (using > filename) you will see nothing - but after a minute or so the command prompt returns. You can now examine the file "viewimgfs-output.txt" for errors (there should be none).
The command has created a new directory below the current - called DUMP. Within this directory you find all files and modules that have been part of the ROM filesystem. You will notice that some files are just there like in the \windows directory of your device and others are decomposed in own directories. I am not expert enought to tell details here - consult the various discussions abuot ROM cooking at XDA Developers.
Mind that often the reconstructed *.dll or *.exe in the module directories cannot directly replace their ROM counterparts. - The toolset contains also powerful tools to reassemble an imgfs and reconstruct an item to dump back to ROM. For me there are still too many things I don't understand - so I stop here describing anything more. Look up yourself at the referenced sources.
- What do the other partitions of the filesystem contain?
- How are the partitions of the filesystem depending on each other?
- What is in the part of the ROM dump before the actual imgfs?
Here I suspect the boot-image and the Radio ROM - but this needs to be confirmed still. - Can the imgfs be cut down to use only the size of the actual (compressed) content?
In my case the dumped ROM contains only FF starting from address 0x3569250 until the end at 0x4d0bfff - this makes roughly 24 MB of wasted space that was surely intended to hold other ROM options like localizations and programs. Would be good to get that as normal device installation memory.
Friday, January 2, 2009
Some interesting links (and pictures) around the net
When I was investigating if the BenQ E72 was a device for me - it was very hard to find any evidence if it had the option to attach a lanyard. Finally I found a set of pictures that told me where it was hidden, see the Taiwanese forum here (Google translated link).
Further squeezing out Google pictures search has also revealed some other interesting links that depict the history of the device's release roadmap. Initial pictures still show the BenQ-Siemens logo and a less glary screen, e.g. here or here or here or here.
It is interesting to note that marketing plans had initially thought about a sliver model, as can be derived from the existence of shop dummies - seen here. Even a black-silver version seemed to exist in the plans, as can be seen here (looks like photoshop-ed version though).
While the device is not really cutting edge technology any longer - plans originate in the 2006 range - I do not have much hope for any further serious updates for this little gadget. It seems though that BenQ (or the mother QisDa) have found cooperations to sell a few of these units around the world. Kyocera sells them as E4000 - and I have even seen evidence (Google translated link) that a Windows Mobile 6.1 version exists for that (despite the Kyocera site tells it is WM6 only). Thanks to the Polish E72 community forum (see left side + here - thanks for revealing the source!). Maybe I can convice some over there to dump us a ROM of that?!
Further squeezing out Google pictures search has also revealed some other interesting links that depict the history of the device's release roadmap. Initial pictures still show the BenQ-Siemens logo and a less glary screen, e.g. here or here or here or here.
It is interesting to note that marketing plans had initially thought about a sliver model, as can be derived from the existence of shop dummies - seen here. Even a black-silver version seemed to exist in the plans, as can be seen here (looks like photoshop-ed version though).
While the device is not really cutting edge technology any longer - plans originate in the 2006 range - I do not have much hope for any further serious updates for this little gadget. It seems though that BenQ (or the mother QisDa) have found cooperations to sell a few of these units around the world. Kyocera sells them as E4000 - and I have even seen evidence (Google translated link) that a Windows Mobile 6.1 version exists for that (despite the Kyocera site tells it is WM6 only). Thanks to the Polish E72 community forum (see left side + here - thanks for revealing the source!). Maybe I can convice some over there to dump us a ROM of that?!
Wednesday, December 31, 2008
Bootloader - how (unsolved yet)
Beeing used to the community with my HTC devices - it seems that we are at loss currently to have low-level access without the operating system running. The only thing that runs well are the itsutil tools from XDA devloper "itsme" - look there: http://wiki.xda-developers.com/index.php?pagename=XdaUtils
Also other tools that operate on the extracted filesystem images (e.g."ROM Kitchen" or also WM5editrom) are working as expected - yet I did not dare yet to flash back anything via pdocwrite :-)
Some low-level acess should be possible, however I do not yet know how. What I found out so far is:
I have also hoped that tools available for the BenQ P51 may help here, but it just seems that they are not doing more than itsutils can do already. And since we do not know yet addresses of the various parts of the ROM, nothing gained here either :-(
Also other tools that operate on the extracted filesystem images (e.g."ROM Kitchen" or also WM5editrom) are working as expected - yet I did not dare yet to flash back anything via pdocwrite :-)
Some low-level acess should be possible, however I do not yet know how. What I found out so far is:
- Pressing power-on and holding the message-key will send a USB signal to a connected PC. The Windows-XP PC then searches for a "Neptune" USB device - for which the web hardly offers anything useful, except:
- The Motorola Flash tools (yes another deja vu with Motorola) require dedicated drivers to install. After this is done succesfully - well nothing more happens.
I have also hoped that tools available for the BenQ P51 may help here, but it just seems that they are not doing more than itsutils can do already. And since we do not know yet addresses of the various parts of the ROM, nothing gained here either :-(
Tuesday, December 30, 2008
Remove UMAClient.exe
You can remove UMAClient.exe from \HKLM\init\Launch.. but still keep WiFi switched off after reboot. UMAClient cares for the settings in Settings->Connections->WiFi transmission. If not loaded also the WiFi mode to disable WiFi if not connected after
Interesting Programs in \windows
Interesting Programs (not linked via .lnk files) in \windows:
- DevHealth.exe will also be called by LogMaster and creates a very elaborate memory and process report. It is named "mem_1.txt" and is either located in the Storage Card root or the main memory root, sized ~ 292kB. Subsequent calls will generate files named mem_
.txt where relates to the called number. This file includes the DLL relationship of all active loaded modules, so it is easy for ROM cleaners to sort out the debug ROM remains.
-> This is the key application to investigate further any modifications of Startup options or ROM modifications. - LogMaster.exe sets various trace and log points, can call netlogctl.exe, swmodemtrace.exe, celogflush.exe, DevHealth.exe, WinsockLogApp.exe, links to LogUtil.dll which relates to logfiles: OSImageVersion.txt, sqpco.log, sqmodem.log, sqdriver.log, sqatcmd.log
My version is 2.4 (I have seen already 2.5 in another ROM). - QDW.exe (internall referenced: "QDW.exe is launched by AppExceptionMonitor.exe", but this .exe is missing, only a dll is remaining) This would read (or write) to files in \Windows\System\ExceptionExtraLogs\. It calls copylog.exe to do the job.
If directly called it asks for a memory card and generates a directory \yyyymmdd_hhmmss\ExceptionExtraLogs\ generating (copying) files ELog.txt KITL.txt qatcmd.log qdriver.log qmodem.log qpco.log verinfo.txt call is finished with "copy failed". - PreForWSA.exe is called via HLKM\init\Launch.. and may prepare WinSockLogging (may call \Windows\WinsockLogApp.exe)
- prtscrn.exe generates a screendump of the current state, it is also called via long press of the Vol-Up key and generates a file called scncap
.jpg in the "\My Documents" folder ( is a sequence number starting at 1).
Power Drain
The E72 battery driver functions do not deliver drain and temperature, but the backup battery voltage is reported. The measured drain (amperemeter) is (rough values):
- 60 mA display visible - no keyboard lights
- 90 mA lowest Light - with keyboard lights
- 110 mA more
- 120 mA normal
- 130 mA high
- 150 mA highest
- BT creates peaks ~ 10 mA on top roughly once per second
- WiFi creates peaks ~60 mA similar rate as above
- power off still drains the battery to charge the backup battery but only a few µA (micro Ampere)
Retrieve hidden settings/options
Retrieve hidden settings/options in the setup menus by removing the commenting in the relevant XML files:
- callforwarding.cpl.xml get CFU settings for Data and Fax (Phone->Call Forwarding)
- clckalrm.cpl.xml get Automatic Timezone setting from Network (Clock&Alarm->TimeZone->AutoTimeZone)
- telephonygsm.cpl.xml get Frequencyband selection (Phone->Band Selection = usually "automatic")
- connectgsm.cpl.xml get SMS delivery options (Connections->SMS Service = usually "circuit only")
Install more than one T9 language
- get packages from http://melgurth.ovh.org/index.php?page=downloads
- download also the package that you already have + the ones you want (so all have the same version) - if you miss to download ALL packages it will spoil your T9 completely
- install them all, ignore device reboot requests in the meantime
- edit HKEY_LOCAL_MACHINE\T9 Input Method\MUI\Languages string "Available" to contain concatenated (separated by comma) all language numbers
- reboot device
Cleaning up the \windows directory
Despite the device has much more free memory (around 25 MB) to install programs on the device than my old Tornado (around 10 MB), I still want to have the device cleaned up from things I do not need. As I (still) have a BT-Fusion branded device, some tips may not be applicable for yours.
- Remove locales not needed for MunduIM (fr, it, br, ...directories)
- \Data folder is for beetzRSS -> move to SD card in options menu
- \Java folder for JBED -> move to SD card, change keys in registry at (HKEY_CURRENT_USER\Software\JBlend)
- \Profiles folder for PIE -> move to SD card by changing paths at: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders (may not be persistent if card is not ready at boot time or is removed)
- \Rings folder for ringtones -> also in \windows but are not referenced from there, so they stay here
- \skins folder is for HipCam (HKEY_LOCAL_MACHINE\Software\Emuzed Inc\HipCam)
- \sounds folder is for Camera sounds (HKEY_LOCAL_MACHINE\System\Pictures\Camera\OEM)
- \themes folder is for HipCam (HKEY_LOCAL_MACHINE\Software\Emuzed Inc\HipCam)
- \traveller folder for FIZZ Traveler (move to SDCard, change items in HKEY_CURRENT_USER\Software\FizzSoftware\MicroClient\TRS)
Hacking the USB Headset connector
[Updated 20090105 - see below]
Well - much to my disappointment, my device (claimed as - nearly new, factory refurbished) was delivered with a set of non-original parts. I received a Blackberry charger which has the option to exchange the plug for the mains-socket, so it also works in my continental sockets in Germany - no problem here, especially as all my other chargers (from my older HTC devices) also work.
BUT: the delivered headset was a cheap Motorola S200 replacement - which has the same plug, but different connectors inside. No way to get it working :-(
I knew that I will not use the original headset, but I need a blueprint to understand what is going on to build an USB-3.5mm adaptor. As I do not have that (yet - hopefully), I have checked other options to debug the duplicate purpose of the standard mini-USB (5 pin) plug.
The good part is that you have big variety of Motorola Headsets or adaptors that you can start working with - just look for the Razor-V3, it has the same physical connector.
The bad part is that the multiple use of the same socket for different purposes creates the need to have the device switch between these modes. Also here it is advised to have a look at related Motorola resources, e.g. here: http://wiki.openezx.org/EMU
Unfortunately the described options do NOT work for the E72 - but they give a clue on what to investigate...
Terminology:
The USB socket has 5 pins + shield, sometimes the numbering is 1,2,3,x,4, but I prefer to number the pins in sequence, i.e. 1,2,3,4,5 - just like the EMU wiki above does.
Findings:
Thanks to the community in Taiwan, see this post, the connection strategy is now settled :-)
Continuing my discussion above the "protocol" on pin(3) is very simple - just connect a resistor (below about 250 ohm) to grounds - that's all - the device will go into headset mode (can also be seen at HKLM\System\State\Hardware - the value of the "Headset" property changes to "1".
After the device is in headset mode, pin(3) can be released again (what I did to identify the other speaker channel and microphone connection). So the final result is then for the numbered pins of the USB connector (1-5):
Mind that the drawing in the Taiwanese post labels the "V+" and "GND" incorrect - they have to be reversed. The "NC" (microphone) pin is close to the - (GND) pin.
Well - much to my disappointment, my device (claimed as - nearly new, factory refurbished) was delivered with a set of non-original parts. I received a Blackberry charger which has the option to exchange the plug for the mains-socket, so it also works in my continental sockets in Germany - no problem here, especially as all my other chargers (from my older HTC devices) also work.
BUT: the delivered headset was a cheap Motorola S200 replacement - which has the same plug, but different connectors inside. No way to get it working :-(
I knew that I will not use the original headset, but I need a blueprint to understand what is going on to build an USB-3.5mm adaptor. As I do not have that (yet - hopefully), I have checked other options to debug the duplicate purpose of the standard mini-USB (5 pin) plug.
The good part is that you have big variety of Motorola Headsets or adaptors that you can start working with - just look for the Razor-V3, it has the same physical connector.
The bad part is that the multiple use of the same socket for different purposes creates the need to have the device switch between these modes. Also here it is advised to have a look at related Motorola resources, e.g. here: http://wiki.openezx.org/EMU
Unfortunately the described options do NOT work for the E72 - but they give a clue on what to investigate...
Terminology:
The USB socket has 5 pins + shield, sometimes the numbering is 1,2,3,x,4, but I prefer to number the pins in sequence, i.e. 1,2,3,4,5 - just like the EMU wiki above does.
Findings:
- Connecting a resistor in the range of 50 to 200 kB between (5+Shield) and (1) will raise the level at (1) from 0,3V to the full power of the battery (you can drive a light with this!) for exactly 10 seconds.
- Pin (3) (the middle one) will generate a stepping voltage output (1 Hz) as long as (1) is up - here I suspect an action is required to confirm the operation mode.
- nothing more - I had to give up here...
- The temporary presence of (a fully powered) supply voltage at pin (1) and the activity at pin (3) may indicate an active wired headset (just like the Motorola). It is however impossible to tell without a real E72 headset at hand...
Thanks to the community in Taiwan, see this post, the connection strategy is now settled :-)
Continuing my discussion above the "protocol" on pin(3) is very simple - just connect a resistor (below about 250 ohm) to grounds - that's all - the device will go into headset mode (can also be seen at HKLM\System\State\Hardware - the value of the "Headset" property changes to "1".
After the device is in headset mode, pin(3) can be released again (what I did to identify the other speaker channel and microphone connection). So the final result is then for the numbered pins of the USB connector (1-5):
- Must be connected with a resistor less than 200 kOhms (but more than 10k - not to drain the battery) to ground. The voltage will rise briefly to battery level (so if you short cut this to ground it may kill it) but then drop back to 0,16 V to stay there. I suspect that accepting calls with the headset button will introduce new functionality here...
- Speaker channel (l,r not checked, source indicates right here) - must be connected to a speaker or a pulldown resistor at device-headset connection time.
- Speaker channel (l,r not checked, source indicates left here)
- Microphone channel (checked to work with Audionotes)
- Grounds
Mind that the drawing in the Taiwanese post labels the "V+" and "GND" incorrect - they have to be reversed. The "NC" (microphone) pin is close to the - (GND) pin.
The crappy Battery levels on the BenQ E72
Did you notice that some report a bad battery life for this device? I did as well and there are several reasons possible for that - the most important one imho is the crappy battery level indication on the device (at least on mine - the BT-Fusion branded Version):
If you watch the Battery-Level in Windows, it reaches 100% already with a battery voltage of only 39xx mV - far less than a fully charged battery. Always watch for the green LED to indicate a full charge - this comes at 42xx mV as it should be.
This problem applies as well for the dis-charge: Any battery voltage above 3906 mV is reported as 100%. So you think the battery lasts forever - just to give you a bad surprise below that voltage. The Tornado is way below 80% here...
I still hope that this is due to a crappy battery.dll which may be a special version for the BT-Fusion device. In its intended use, it will eat more power than a normal device as it will scan for WIFI to connect a VOIP call via Internet if possible.
If you want to contribute your observations for a non BT-Fusion device - you can get the Voltage and Charge Percentage from the registry anytime at: HKLM\System\State\ or simply use the well known CeleTask option "Power Status".
If you know of a working(!) Batterymonitor that logs data to a file please tell me. My current idea is to create a MortScript that polls the registry and writes data to a file - yet no time to do that actually.
Edit 20090104:
In the meantime I have seen that the charge-level may not only depend on the batteryvoltage alone - see especially this link. When scanning the extracted files from the ROM dump, I have also found a huge bunch of possible registry entries in the battery.dll module. I will not try to debug their influence, so my only hope is that some other ROM contains a better charge-level calculation.
If you watch the Battery-Level in Windows, it reaches 100% already with a battery voltage of only 39xx mV - far less than a fully charged battery. Always watch for the green LED to indicate a full charge - this comes at 42xx mV as it should be.
This problem applies as well for the dis-charge: Any battery voltage above 3906 mV is reported as 100%. So you think the battery lasts forever - just to give you a bad surprise below that voltage. The Tornado is way below 80% here...
I still hope that this is due to a crappy battery.dll which may be a special version for the BT-Fusion device. In its intended use, it will eat more power than a normal device as it will scan for WIFI to connect a VOIP call via Internet if possible.
If you want to contribute your observations for a non BT-Fusion device - you can get the Voltage and Charge Percentage from the registry anytime at: HKLM\System\State\ or simply use the well known CeleTask option "Power Status".
If you know of a working(!) Batterymonitor that logs data to a file please tell me. My current idea is to create a MortScript that polls the registry and writes data to a file - yet no time to do that actually.
Edit 20090104:
In the meantime I have seen that the charge-level may not only depend on the batteryvoltage alone - see especially this link. When scanning the extracted files from the ROM dump, I have also found a huge bunch of possible registry entries in the battery.dll module. I will not try to debug their influence, so my only hope is that some other ROM contains a better charge-level calculation.
Why I bought the BenQ E72
Well - this phone caught my eye already a long time ago, i.e. when it was announced early 2007. At that time I just had bought my Tornado (O2 XDA Phone) and the E72 did not offer much more - ecpecially with the price tag it had at that time.
Then, September 2008, the phone hit Expansys.UK for just 100GBP - and I was really tempted to buy one. As I found an even cheaper option on ebay then (69GBP) I could no longer resist and bought one. Still some days after I bought it - the promised wired headset is not there, despite the vendor has promised to deliver one (as announced in the advertisment) - sigh... if that does not come finally I will have to return the device and buy one from Expansys.
OK - what does it offer more than the Tornado?
Then, September 2008, the phone hit Expansys.UK for just 100GBP - and I was really tempted to buy one. As I found an even cheaper option on ebay then (69GBP) I could no longer resist and bought one. Still some days after I bought it - the promised wired headset is not there, despite the vendor has promised to deliver one (as announced in the advertisment) - sigh... if that does not come finally I will have to return the device and buy one from Expansys.
OK - what does it offer more than the Tornado?
- thinner, lighter (not really smaller)
- less energy consumption in wireless modes (Bluetooth and WIFI)
- can read micro-SDHC cards (after installation of a small CAB)
- micro-SD cards are hot-plugable
- much better sound from the speaker
- better camera (2 instead of 1,3 MP + better options: Emuzed HipCam)
- better JAVA (JBlend)
- Nice MMS Client (from Jataayu)
- Active Sync via Bluetooth is a snap now :-)
- Battery level indication is crap (dedicated post will follow)
- no 3.rd party wired headsets or adapters available (dedicated post will follow)
- only English language installed in my BT-Fusion branded device
- smaller LCD (2" vs 2,2") and Battery (900 vs 1150 mAh)
- no big support community (yet)
- "Redial" option when calls are busy
- automatic Key-Lock (on Home Screen Settings)
- Facade HomeScreens (limited)
- MunduIM
- BeetzStream RSS
- WM5storage (check the LED options - you can choose any, including vibrate)
- TomTom 5 - just like any other application after application unlock
- omapclock, special Tornado related tools
Starting the log...
Hey - despite many resources on the web about Windows Mobile - I have made up my mind to have a kind of log related to my BenQ E72 efforts. Unfortunately BenQ is not a vendor with a long history in Windows Mobile - and not very popular in Germany since the failed Benq-Siemens deal.
This makes dedicated resources for this phone or re-usable tools and methods hard to find and even harder to have a common place to discuss about.
I have Windows Mobile Smartphones since 2004 (SDA Music) when I moved away from my 2-device (mobile + organizer) handling to just one. Then came an O2 XDA phone with TomTom mobile 5 (receiving a new heart from a Vodafone VDA 1240 with WiFi finally). This O2 XDA phone is still my device of choice as it is not fully replaced yet by me last phone, the BenQ E72.
This makes dedicated resources for this phone or re-usable tools and methods hard to find and even harder to have a common place to discuss about.
I have Windows Mobile Smartphones since 2004 (SDA Music) when I moved away from my 2-device (mobile + organizer) handling to just one. Then came an O2 XDA phone with TomTom mobile 5 (receiving a new heart from a Vodafone VDA 1240 with WiFi finally). This O2 XDA phone is still my device of choice as it is not fully replaced yet by me last phone, the BenQ E72.
Subscribe to:
Posts (Atom)