A780 Flex Bit List

[samr7]

It seemed worthwhile to compile a list of known flex bits, for those brave enough to edit them.

General:
0x3F - PST test commands (laforge)
0x4B - Voice Recognizer
0x92 - P2P
0x9B - SIP
0xA2 - Qt application installer
0xAA - WVIMPS IM client

Setup:
0x68 - USB Net mode available (AT+MODE=11, not 99)
0x9A - Content Channels available

Opera:
0x6F - Browser Cache
0x7E - "Additional charges may apply" warning on startup
Unknown: 0E, 12, 18, 58, 5E, 5F
Unknown: 70, 78, 79, 7A, 7B, 7C, 7D, 80, 83, 84, 87, 8B, A4, A6, A8

How to modify:

These flex bits come from /usr/setup/ezx_flexbit.cfg. This file is a regular .INI format file with up to nine interesting lines:

[SYS_FLEX_TABLE]
0 = xxxx
1 = yyyy
...
8 = zzzz

Each line is a base-10 integer representing 32 flex bit locations. The first integer contains flex bits 0-31, the second 32-63, etc.. The most significant bit of the integer represents the first flex bit on the line, the second most significant bit is the second flex bit, etc.. Some lines might be omitted, and default to zero.

The formula to test a flex bit is:
Line = floor(Bit / 32)
BitSet = (Value[Line] & (1 << (31 - (Bit % 32))))

To edit this file, you must replace the /usr/config cramfs image. There may be a secondary ezx_flexbit.cfg file under /ezxlocal, but that file is a decoy, ignore it. The general procedure for replacing a /usr/setup cramfs image is as follows:

1. Retrieve a copy of your existing /usr/setup cramfs image
(a) Use "dd" on the console to dump the contents of /dev/roflash2
(b) Extract CG36 from an existing firmware file
2. Mount it loopback and copy its contents to a local writable directory.
3. Edit the files you wish to change (ezx_flexbit.cfg) in the copy directory.
4. Use mkcramfs to build a new image out of the copy directory.
5. Write the new image to your /usr/setup flash area
(a) Use flashkit on the console
(b) Create an SHX file with only a ramldr and CG36, and use PST or RSDLite to flash it.

Credits:
Mack points out that with the voice recognizer disabled, the button that normally activates it does nothing. By default in the R52_G_0D.74.A2R_L001 variant firmware, it will activate the voicenote app. Curious how to get that behavior...
Laforge (a.k.a. Harald Welte?) points out the PST test command bit 0x3F.

Where did this information come from? By analyzing disassembly dumps of various executables. There is one specific routine SETUP_Utility::getFlexBit(SETUP_FLEX_ID_T, bool &) that retrieves a single flex bit, and its signature is easy to identify. The list is very incomplete at the moment. Find a new flex bit and get your name in the credits.

[mack]

I disabled 0x4B and it disabled by voice-recognition button as expected. However, the button doesn't activate the recorder. Just does nothing. It may be controlled by some other bit. What does your line-2 look like ?

Before the change, mine was
10000001110101110000000110000011
and after the change:
10000001110001110000000110000011

Do you have any additional bit set around the same location ? Maybe the one before that or after that, which are both 0 on mine ?

[laforge]

0x3f is the "test command" bit.

It is evaluated by /usr/SYSqtapp/ap_tcmd/ch_tcmd_flexbit to test whether or not to start
/usr/SYSqtapp/ap_tcmd/ap_tcmd (look at the /etc/rc.d/init.d/start_tcmd script).

Looking at that script, it seems like it was copied from a script for "aplogd". This seems to be a logging daemon (for development /debugging) that passes all logging messages via a LD_PRELOAD wrapper to a specific USB device endpoint. Unfortunately aplogd doesn't seem to be in production firmware images

[billb]

Per this thread:

http://www.motorolafans.com/index.ph...ewtopic&t=2618

Flexbit 0x100 controls whether voicenote or vr is launched when the voice button is pressed.

At least, this is the case for my phone, a German model flashed with R52_G_0D.74.A2R_0D.C0.B1P_SE6820AD3F1_L003_S008_P004_GCOA780000E1025

[NetNut404]

So after reading both threads.. I am left with this question.. doesn't anyone have a good walkthough on how to do this? I gather you get in on a telnet extract what you need right? if I had the exact commands, then maybe I could get somewhere...

anyone wanna help a newbie out?

Per this thread:

http://www.motorolafans.com/index.ph...ewtopic&t=2618

Flexbit 0x100 controls whether voicenote or vr is launched when the voice button is pressed.

At least, this is the case for my phone, a German model flashed with R52_G_0D.74.A2R_0D.C0.B1P_SE6820AD3F1_L003_S008_P004_GCOA780000E1025

[NetNut404]

OK, so I did my first flex bit modification, and got the vr to work on my european a780 (somone wrote exactly what to put in the file), so what I don't get is how to translate the below two fields

0x92 - P2P

0x9B - SIP

into what I should put in the /usr/setup/ezx_flexbit.cfg ?

I am sure I am missing the obvious...

any help, is greatly appreciated...

[koradji]

my /usr/setup/ezx_flexbit.cfg is
[SYS_FLEX_TABLE]
0 = 1208211392
1 = 374437888
2 = 2178351491
3 = 1678589
4 = 4289465088
5 = 195198976

Pleasehelp me! how to enable MPKG?

thanks

[flammenwerfer]

I think a lot of effort has to be made in this field:

It is quite difficult to calculate the correct values for every feature with this system.
In my opinion It would be unvaluable if a list or table with the final line values for the varios features could be tailored.

Since most of the people, at least in the spanish A780 community, are windows users, and they therefore don't mess with cramfs and the like (they have almost too much with flashkit) it would be, once correct line values for different features had been identified, an easy task to create an distribute a variety of modified CG36s to the people so they can "just flash it".

This way, lot of people could solve mpkg, vr, sip, p2p, problems and wishes easily and without optimiced_setup drawbacks

[NetNut404]

@samr7 or anyone who can answer this...

My caculations were wrong apperently.. I could use some help...

My /usr/setup/ezx_flexbit.cfg was

[SYS_FLEX_TABLE]
0 = 1208178625
1 = 2651944960
2 = 2161574147
3 = 1676540
4 = 40B957575
5 = 679739392
6 = 0
7 = 0
8 = 0

and I wanted to enable

0x92 - P2P
0x9B - SIP

So I thought that meant I should edit line 4 =

bit 18 and bit 27 (if I figured it out right )which I may not have...

so then I took

0x403957575 and converted it to:

10000000011100101010111010101110101

and thought the bits to edit would make it..

10000001011100101010111010101110101

so line 4= would now convert to:

4 = 40B957575

giving me:

[SYS_FLEX_TABLE]
0 = 1208178625
1 = 2651944960
2 = 2161574147
3 = 1676540
4 = 40B957575
5 = 679739392
6 = 0
7 = 0
8 = 0

but when I reflashed it back.. it made no difference I could tell.. so what did I calculate incorrectly.. how do I tell which bit to edit? I am a little lost..

Thanks..

[NetNut404]

OK I tried again.. I guess I still calculated wrong.. because I saw no changes..

my flexbit now reads:

[SYS_FLEX_TABLE]
0 = 1208178625
1 = 2651944960
2 = 2161574147
3 = 1676540
4 = 4039075F5
5 = 679739392
6 = 0
7 = 0
8 = 0


changed from original :

[SYS_FLEX_TABLE]
0 = 1208178625
1 = 2651944960
2 = 2161574147
3 = 1676540
4 = 403917575
5 = 679739392
6 = 0
7 = 0
8 = 0

do I need to change more then the flexbit file to make this affect anything?
I am trying to add SIP and P2P

Thanks..