Reading VbattDSP from SLIK - need small help

[n0rbi666]

Hi !

My first message here (Sorry for my poor English )

So : we have tutorial for x35, how to calibrate battery - here
Everything is clear - but we don't know, where VbattDSP is in ram.
And, without it, we can't correctly calibrate battery (writing someone's blk files isn't good idea - because calibration is for phone, not for battery)

But today, I discovered OpenBFB fo SL45i patch LINK
After applying that, we can see in Sensor tools Values, which we coudn't see earlier : VbattMiddle, VbattMax, VbattMin, BattTemp, EnvTemp, VCXOTemp
But still, we can't see VbattDSP - we need address in RAM to it, to put it in siemenstool.ini ...

But ! in Siemens debugger, we can se in section hardware/power managment - addres to Sensor RAM position - 0x03E00E

My question is : can we find function, which uses that ram addres, and maybe that function will have address to RAM where is VbattDSP ?
Maybe there is function, wchich calculates VbattDSP from that :
VBattDSP = (((SpgY04V – SpgY03V)/SpgDelta) * (VBatt – SpgX0)) + SpgY04V

I tried to calculate VbattDSP and search that value in ram - but without success...

Are there any chances to discover, where that VbattDSP in ram is ?
We have almost everything to SLIK, but still we does'nt have that

[n0rbi666]

Mkay, so after long weeks of researching, asm learning, searching all over the world, fighting with Mordor, I've found Holy Grail

Oh, ok, I did'nt found it, but I'm preety sure, that I've found VbattDSP address in SLIK56 ram
Let's go !
At first, you'll need to apply OpenBFB patch

;*** OpenBFB for SL45v56 ***
;tnx to Sinclair =)
200290: 60 00

Then. modify siemenstool.ini to look like that :

[Common]
ComNumber=1
BaudRate=57600
InitServiceModeDelay=5
SensorsUpdateDelay=1
; �Ą¦¨¬ ŕ ˇ®âë
; 1 - ServiceMode
; 2 - BurnInMode
; 3 - BFBMode
WorkMode=3


[Debug]
DoTrace=Yes
TraceFile=trace.log
LogFile=output.log

[VBattDSP]
; HW<HWId>SW<MobileSWVersion>=VBattDSPAddr
; C35 v18
HW28SW18=10F314
; C35 v24
HW28SW24=10F348
; S35 v18
HW26SW18=120EFE
; S35 v20
HW26SW20=110F6E
; SL45 v56
HW31SW56=03E004

Yes, we need BFB mode
Next, turn on your SLIK, connect it to PC, and start Sensortools.exe

Wow ! We have every value we need ! That's good, mkay ?
But - VbattDSP is strange, but there's no problem
Now, download my attachment (.xls file) - we'll need it to calibrate sensors, and get external voltmeter ( !! )

1) With empty battery, we connect phone to computer, wait ~2min and read Vbatt1 from external voltometer, and VbattDSP1 from SensorTools
Write it down

2) We fully charge battery, connect phone to computer, wait ~2min and read Vbatt2 from external voltometer, and VbattDSP2 from SensorTools
Write it down

Note for 1 and 2 ! It MUST be external Voltometer, DON'T use VbattMiddle from Sensortools :!:

3) Run vbattdsp.xls, fill in Vbatt1, VbattDSP1, Vbatt2, VbattDSP2
SpgX0 - it should be ~4200
SpgDelta - it should be ~995-1008

And we have calculate SpgY03V and SpgY04V
Put it in Sensortools, and post here your results

WARNING !
I don't know, if this will work, so better backup your eeprom before testing
Don't blame me, if your battery will explode

For me, this works very good - now, in netmonitor, Vbatt = Vbatt measured by external voltometer - and that's what we're looking for

PS. Why there is limit of 16 pictures per post ?

[trustkill]

Great work, n0rbi666 !

[sadengr]

Thanks for the contribution to the community n0rbi!
May I ask you some dummy questions?

1. In krafte's instructions it says for step1 that "full charged battery (charge externly not in phone)"
Charge with what, if not in phone ?

2. How do we read Vbatt1 from digital-external voltometer since the battery is on the phone?

Thanks, I'll try your "how-to" to my two siemens (sl45 and sl45i) with my two batteries (540, 650 mah) and I'll post results here.

[n0rbi666]

Originally Posted by sadengr

1. In krafte's instructions it says for step1 that "full charged battery (charge externly not in phone)"
Charge with what, if not in phone ?

Charge in phone for few hours - we don't need to use an external charger

2. How do we read Vbatt1 from digital-external voltometer since the battery is on the phone?

You can use for eg alu foil from chocolate, but be aware - oryginal SL45 cover can do short-circuit (it's metalic )

Oh, and I forgot - if anyone will have problems with new battery settings, try to add 200 to SpgY03V and SpgY04V

[GoLL@B]

Great work If it helps my battery, you will be my master

[TUFF Stough]

@n0rbi666: Sorry, I can't download the *.xls file. Can you send it to my e-mail address? [email protected]

Also can you please run the same test for S45iv4?

Many thanks in advance.

[lalo.lerry]

We are already working togheter for developing it for S45i

[TUFF Stough]

Ah, cool...!!! Just can't wait for the result.

[Xinshou]

Thanks to n0rbi666.

Does the following have to be changed for SL45 v5508?
; SL45 v56
HW31SW56=03E004

[daseth007]

so, any results yet?

[lalo.lerry]

No.
N0rbi666 didn't yet answer my questions (he seems desappeared)

[Xinshou]

It's great. zs100000 has found the RAM address of VbattDSP for SL45 v5508.
; SL45 v55
HW31SW55=03E00E

[TUFF Stough]

Originally Posted by lalo.lerry

No.
N0rbi666 didn't yet answer my questions (he seems desappeared)

Or maybe we can ask zs100000 for help?

[lalo.lerry]

Maybe he could, but:
1. He is not a forum member
2. Finding RAM values in v55 fw starting from v56 is very very easy (can you also see in results, v55 RAM location is only 10 byte forward), finding it in another phone (without ever having it) is very hard.