G4H Kids smartwatch ? - Other SmartWatches

hi
I got my hands on this smartwatch
https://www.amazon.com/gp/product/B07XTCGD7B
It seems to be a "G4H" kids smartwatch, which seems to be available from multiple vendors.
It seems to be running Android...
It has a pogopin based charging adapter, where the middle 3 pins are not usually connected but seem to be "USB pins"
I opened this up and I was able to find a ribbon cable G4E-USB-FPC-V0.1. / F6-2C connecting those pins to the PCB.
I bet someone make a USB data cable which also has connections to those middle pins.
[ Perhaps this one https://www.alibaba.com/product-detail/high-quality-custom-male-gold-plating_62427401556.html ]
Has anyone tried to hack this one yet ? Anyone knows what those middle 3 pins are ?
Any hints on putting this device into recovery mode or fastboot mode ?
G
Update: 2020-09-26
I got a 4 pin smartwatch fast charging cable
from EBAY. This now Charges and also gets me to connect to the watch as USB... I can do a lsusb on the device from my Rpi Linux.
lsusb -v
Code:
Bus 001 Device 065: ID 1782:5d03 Spreadtrum Communications Inc.
Couldn't open device, some information will be missing
Device Descriptor:
bLength 18
bDescriptorType 1
bcdUSB 2.00
bDeviceClass 0
bDeviceSubClass 0
bDeviceProtocol 0
bMaxPacketSize0 64
idVendor 0x1782 Spreadtrum Communications Inc.
idProduct 0x5d03
bcdDevice 4.04
iManufacturer 1
iProduct 2
iSerial 3
bNumConfigurations 1
Configuration Descriptor:
bLength 9
bDescriptorType 2
wTotalLength 0x0020
bNumInterfaces 1
bConfigurationValue 1
iConfiguration 4
bmAttributes 0xc0
Self Powered
MaxPower 500mA
Interface Descriptor:
bLength 9
bDescriptorType 4
bInterfaceNumber 0
bAlternateSetting 0
bNumEndpoints 2
bInterfaceClass 8 Mass Storage
bInterfaceSubClass 6 SCSI
bInterfaceProtocol 80 Bulk-Only
iInterface 5
Endpoint Descriptor:
bLength 7
bDescriptorType 5
bEndpointAddress 0x81 EP 1 IN
bmAttributes 2
Transfer Type Bulk
Synch Type None
Usage Type Data
wMaxPacketSize 0x0200 1x 512 bytes
bInterval 0
Endpoint Descriptor:
bLength 7
bDescriptorType 5
bEndpointAddress 0x01 EP 1 OUT
bmAttributes 2
Transfer Type Bulk
Synch Type None
Usage Type Data
wMaxPacketSize 0x0200 1x 512 bytes
bInterval 1
PS: India based dev's, (we cannot really stop made-in-china, but we can at-least reflash all the made-in-china with AOSP)
[PS => Political Statement :cyclops: )
Some more Info:
https://omg-solutions.com/gps-tracker/latest-singapore-waterproof-video-call-gps-kids-watch-gps033w/
https://riseofsmart.com/smartwatche...ch-display-camera-take-video-smartwatch-kids/
https://www.flipkart.com/arroha-kids-smart-watch-gps-wifi-4g-smartwatch/p/itm40654c01873c8
https://naijarom.com/infinity-chinese-miracle-2-spd-v124
https://forum.hovatek.com/thread-21776.html
https://www.gadgetvictims.com/2017/07/diy-magnetic-charger-for-kingwear-lemfo.html
LEMFO is one of the manufacturers/brand names
Its using SC9820E from http://www.unisoc.com/sc9820e
https://sc9820e-datasheet.com/
The Wireless MAC on the device starts with
"40-45-DA" which is for...
Spreadtrum Communications (Shanghai) Co., Ltd.
Building 1, Spreadtrum Center, No.2288, Zuchongzhi Rd
Shanghai 201203
The build number seems to be G4H_EMMC_OVERSEA_240_5M_akq_IPS_w_2020.07.09_09.55.00, on the watch depicted in the pictures.
I also have another similar device whish has build number as G4H_EMMC_240_5M_YDE_A36H_OVERSEA_LINE_20200506_10.35.00
Looks like the Nokia 3310-4G is also powered by the same chipset
https://www.gizmochina.com/2018/03/26/nokia-3310-4g-packs-spreadtrum-sc9820-chipset/
The phone seems to be using "YunOS" which is some version of AOSP, also called AliOS (Alibaba version)
Does anyone have the Nokia 3310-4G model #TA-1077

ghatothkach said:
hi
I got my hands on this smartwatch
https://www.amazon.com/gp/product/B07XTCGD7B
It seems to be a "G4H" kids smartwatch, which seems to be available from multiple vendors.
It seems to be running Android...
It has a pogopin based charging adapter, where the middle 3 pins are not usually connected but seem to be "USB pins"
I opened this up and I was able to find a ribbon cable G4E-USB-FPC-V0.1. / F6-2C connecting those pins to the PCB.
I bet someone make a USB data cable which also has connections to those middle pins.
[ Perhaps this one https://www.alibaba.com/product-detail/high-quality-custom-male-gold-plating_62427401556.html ]
Has anyone tried to hack this one yet ? Anyone knows what those middle 3 pins are ?
Any hints on putting this device into recovery mode or fastboot mode ?
G
Update: 2020-09-26
I got a 4 pin smartwatch fast charging cable
from EBAY. This now Charges and also gets me to connect to the watch as USB... I can do a lsusb on the device from my Rpi Linux.
lsusb -v
Code:
Bus 001 Device 065: ID 1782:5d03 Spreadtrum Communications Inc.
Couldn't open device, some information will be missing
Device Descriptor:
bLength 18
bDescriptorType 1
bcdUSB 2.00
bDeviceClass 0
bDeviceSubClass 0
bDeviceProtocol 0
bMaxPacketSize0 64
idVendor 0x1782 Spreadtrum Communications Inc.
idProduct 0x5d03
bcdDevice 4.04
iManufacturer 1
iProduct 2
iSerial 3
bNumConfigurations 1
Configuration Descriptor:
bLength 9
bDescriptorType 2
wTotalLength 0x0020
bNumInterfaces 1
bConfigurationValue 1
iConfiguration 4
bmAttributes 0xc0
Self Powered
MaxPower 500mA
Interface Descriptor:
bLength 9
bDescriptorType 4
bInterfaceNumber 0
bAlternateSetting 0
bNumEndpoints 2
bInterfaceClass 8 Mass Storage
bInterfaceSubClass 6 SCSI
bInterfaceProtocol 80 Bulk-Only
iInterface 5
Endpoint Descriptor:
bLength 7
bDescriptorType 5
bEndpointAddress 0x81 EP 1 IN
bmAttributes 2
Transfer Type Bulk
Synch Type None
Usage Type Data
wMaxPacketSize 0x0200 1x 512 bytes
bInterval 0
Endpoint Descriptor:
bLength 7
bDescriptorType 5
bEndpointAddress 0x01 EP 1 OUT
bmAttributes 2
Transfer Type Bulk
Synch Type None
Usage Type Data
wMaxPacketSize 0x0200 1x 512 bytes
bInterval 1
PS: India based dev's, (we cannot really stop made-in-china, but we can at-least reflash all the made-in-china with AOSP)
[PS => Political Statement :cyclops: )
Some more Info:
https://omg-solutions.com/gps-tracker/latest-singapore-waterproof-video-call-gps-kids-watch-gps033w/
https://riseofsmart.com/smartwatche...ch-display-camera-take-video-smartwatch-kids/
https://www.flipkart.com/arroha-kids-smart-watch-gps-wifi-4g-smartwatch/p/itm40654c01873c8
https://naijarom.com/infinity-chinese-miracle-2-spd-v124
https://forum.hovatek.com/thread-21776.html
https://www.gadgetvictims.com/2017/07/diy-magnetic-charger-for-kingwear-lemfo.html
LEMFO is one of the manufacturers/brand names
Its using SC9820E from http://www.unisoc.com/sc9820e
https://sc9820e-datasheet.com/
The Wireless MAC on the device starts with
"40-45-DA" which is for...
Spreadtrum Communications (Shanghai) Co., Ltd.
Building 1, Spreadtrum Center, No.2288, Zuchongzhi Rd
Shanghai 201203
The build number seems to be G4H_EMMC_OVERSEA_240_5M_akq_IPS_w_2020.07.09_09.55.00, on the watch depicted in the pictures.
I also have another similar device whish has build number as G4H_EMMC_240_5M_YDE_A36H_OVERSEA_LINE_20200506_10.35.00
Looks like the Nokia 3310-4G is also powered by the same chipset
https://www.gizmochina.com/2018/03/26/nokia-3310-4g-packs-spreadtrum-sc9820-chipset/
The phone seems to be using "YunOS" which is some version of AOSP, also called AliOS (Alibaba version)
Does anyone have the Nokia 3310-4G model #TA-1077
Click to expand...
Click to collapse
Hi, can you pull the system os using adb?
That can help you to get the drivers, if you want to port another watch os.

hi
I cannot get ADB to work yet
G

Hello, Have you connected with adb? I opened the system engineer mode with dial *#*#83781#*#* But under Debug&Log tab, there is no enable debug mode. I think, If I can open debug mode, I can connect with adb.

Thanks you all for those useful info. I have a watch like this. One of the things I am interested is to turn the watch's LTE to a wifi hotspot for other devices, and I found a way to do so, though not very convenience. I am posting the instruction here. Hopefully it is useful to others, and maybe there is a better way to do so:
From Phone, dial *#*#83781#*#* to enter Engineer Mode
Under Connectivity tab, “Start Services”, the go to “Sfatap Wifi Channel”, toggle Auto (off->on->off), then “OK” when seeing “Auto Close Warning”. Optionally choose a 2.4GHz Wifi Channel
Back to the top/root screen, slide from the screen top, and choose the little blue icon at the upper-left most corner to setup Wifi hotspot’s name, security mode (open, WPA PSK, WPA2 PSK) and password.
Note that enabling hotspot will disable the watch's wifi to internet. Any change such as, reboot, turning off hotspot in 3), or enabling wifi will shutdown the hotspot. To enable again, repeat step 1-2 (settings in 3 is saved)

I have same watch. After changing one parameter in Engineer mode, shartwatch doesn't recognize the SIM card and restarts automatically 1 min after boot.
Can you please support how to fix this issue? is there any possibility to do a factory reset using the button on Watch?
Or restore Engineer Mode to default?
THX a lot in advance

ghatothkach said:
hi
I got my hands on this smartwatch
https://www.amazon.com/gp/product/B07XTCGD7B
It seems to be a "G4H" kids smartwatch, which seems to be available from multiple vendors.
It seems to be running Android...
It has a pogopin based charging adapter, where the middle 3 pins are not usually connected but seem to be "USB pins"
I opened this up and I was able to find a ribbon cable G4E-USB-FPC-V0.1. / F6-2C connecting those pins to the PCB.
I bet someone make a USB data cable which also has connections to those middle pins.
[ Perhaps this one https://www.alibaba.com/product-detail/high-quality-custom-male-gold-plating_62427401556.html ]
Has anyone tried to hack this one yet ? Anyone knows what those middle 3 pins are ?
Any hints on putting this device into recovery mode or fastboot mode ?
G
Update: 2020-09-26
I got a 4 pin smartwatch fast charging cable
from EBAY. This now Charges and also gets me to connect to the watch as USB... I can do a lsusb on the device from my Rpi Linux.
lsusb -v
Code:
Bus 001 Device 065: ID 1782:5d03 Spreadtrum Communications Inc.
Couldn't open device, some information will be missing
Device Descriptor:
bLength 18
bDescriptorType 1
bcdUSB 2.00
bDeviceClass 0
bDeviceSubClass 0
bDeviceProtocol 0
bMaxPacketSize0 64
idVendor 0x1782 Spreadtrum Communications Inc.
idProduct 0x5d03
bcdDevice 4.04
iManufacturer 1
iProduct 2
iSerial 3
bNumConfigurations 1
Configuration Descriptor:
bLength 9
bDescriptorType 2
wTotalLength 0x0020
bNumInterfaces 1
bConfigurationValue 1
iConfiguration 4
bmAttributes 0xc0
Self Powered
MaxPower 500mA
Interface Descriptor:
bLength 9
bDescriptorType 4
bInterfaceNumber 0
bAlternateSetting 0
bNumEndpoints 2
bInterfaceClass 8 Mass Storage
bInterfaceSubClass 6 SCSI
bInterfaceProtocol 80 Bulk-Only
iInterface 5
Endpoint Descriptor:
bLength 7
bDescriptorType 5
bEndpointAddress 0x81 EP 1 IN
bmAttributes 2
Transfer Type Bulk
Synch Type None
Usage Type Data
wMaxPacketSize 0x0200 1x 512 bytes
bInterval 0
Endpoint Descriptor:
bLength 7
bDescriptorType 5
bEndpointAddress 0x01 EP 1 OUT
bmAttributes 2
Transfer Type Bulk
Synch Type None
Usage Type Data
wMaxPacketSize 0x0200 1x 512 bytes
bInterval 1
PS: India based dev's, (we cannot really stop made-in-china, but we can at-least reflash all the made-in-china with AOSP)
[PS => Political Statement :cyclops: )
Some more Info:
https://omg-solutions.com/gps-tracker/latest-singapore-waterproof-video-call-gps-kids-watch-gps033w/
https://riseofsmart.com/smartwatche...ch-display-camera-take-video-smartwatch-kids/
https://www.flipkart.com/arroha-kids-smart-watch-gps-wifi-4g-smartwatch/p/itm40654c01873c8
https://naijarom.com/infinity-chinese-miracle-2-spd-v124
https://forum.hovatek.com/thread-21776.html
https://www.gadgetvictims.com/2017/07/diy-magnetic-charger-for-kingwear-lemfo.html
LEMFO is one of the manufacturers/brand names
Its using SC9820E from http://www.unisoc.com/sc9820e
https://sc9820e-datasheet.com/
The Wireless MAC on the device starts with
"40-45-DA" which is for...
Spreadtrum Communications (Shanghai) Co., Ltd.
Building 1, Spreadtrum Center, No.2288, Zuchongzhi Rd
Shanghai 201203
The build number seems to be G4H_EMMC_OVERSEA_240_5M_akq_IPS_w_2020.07.09_09.55.00, on the watch depicted in the pictures.
I also have another similar device whish has build number as G4H_EMMC_240_5M_YDE_A36H_OVERSEA_LINE_20200506_10.35.00
Looks like the Nokia 3310-4G is also powered by the same chipset
https://www.gizmochina.com/2018/03/26/nokia-3310-4g-packs-spreadtrum-sc9820-chipset/
The phone seems to be using "YunOS" which is some version of AOSP, also called AliOS (Alibaba version)
Does anyone have the Nokia 3310-4G model #TA-1077
Click to expand...
Click to collapse
Have you tried to send a text message to turn on debug mode? try this (no space): pw,123456,DEVELOP,1#

ghatothkach said:
hi
I got my hands on this smartwatch
https://www.amazon.com/gp/product/B07XTCGD7B
It seems to be a "G4H" kids smartwatch, which seems to be available from multiple vendors.
It seems to be running Android...
It has a pogopin based charging adapter, where the middle 3 pins are not usually connected but seem to be "USB pins"
I opened this up and I was able to find a ribbon cable G4E-USB-FPC-V0.1. / F6-2C connecting those pins to the PCB.
I bet someone make a USB data cable which also has connections to those middle pins.
[ Perhaps this one https://www.alibaba.com/product-detail/high-quality-custom-male-gold-plating_62427401556.html ]
Has anyone tried to hack this one yet ? Anyone knows what those middle 3 pins are ?
Any hints on putting this device into recovery mode or fastboot mode ?
G
Update: 2020-09-26
I got a 4 pin smartwatch fast charging cable
from EBAY. This now Charges and also gets me to connect to the watch as USB... I can do a lsusb on the device from my Rpi Linux.
lsusb -v
Code:
Bus 001 Device 065: ID 1782:5d03 Spreadtrum Communications Inc.
Couldn't open device, some information will be missing
Device Descriptor:
bLength 18
bDescriptorType 1
bcdUSB 2.00
bDeviceClass 0
bDeviceSubClass 0
bDeviceProtocol 0
bMaxPacketSize0 64
idVendor 0x1782 Spreadtrum Communications Inc.
idProduct 0x5d03
bcdDevice 4.04
iManufacturer 1
iProduct 2
iSerial 3
bNumConfigurations 1
Configuration Descriptor:
bLength 9
bDescriptorType 2
wTotalLength 0x0020
bNumInterfaces 1
bConfigurationValue 1
iConfiguration 4
bmAttributes 0xc0
Self Powered
MaxPower 500mA
Interface Descriptor:
bLength 9
bDescriptorType 4
bInterfaceNumber 0
bAlternateSetting 0
bNumEndpoints 2
bInterfaceClass 8 Mass Storage
bInterfaceSubClass 6 SCSI
bInterfaceProtocol 80 Bulk-Only
iInterface 5
Endpoint Descriptor:
bLength 7
bDescriptorType 5
bEndpointAddress 0x81 EP 1 IN
bmAttributes 2
Transfer Type Bulk
Synch Type None
Usage Type Data
wMaxPacketSize 0x0200 1x 512 bytes
bInterval 0
Endpoint Descriptor:
bLength 7
bDescriptorType 5
bEndpointAddress 0x01 EP 1 OUT
bmAttributes 2
Transfer Type Bulk
Synch Type None
Usage Type Data
wMaxPacketSize 0x0200 1x 512 bytes
bInterval 1
PS: India based dev's, (we cannot really stop made-in-china, but we can at-least reflash all the made-in-china with AOSP)
[PS => Political Statement :cyclops: )
Some more Info:
https://omg-solutions.com/gps-tracker/latest-singapore-waterproof-video-call-gps-kids-watch-gps033w/
https://riseofsmart.com/smartwatche...ch-display-camera-take-video-smartwatch-kids/
https://www.flipkart.com/arroha-kids-smart-watch-gps-wifi-4g-smartwatch/p/itm40654c01873c8
https://naijarom.com/infinity-chinese-miracle-2-spd-v124
https://forum.hovatek.com/thread-21776.html
https://www.gadgetvictims.com/2017/07/diy-magnetic-charger-for-kingwear-lemfo.html
LEMFO is one of the manufacturers/brand names
Its using SC9820E from http://www.unisoc.com/sc9820e
https://sc9820e-datasheet.com/
The Wireless MAC on the device starts with
"40-45-DA" which is for...
Spreadtrum Communications (Shanghai) Co., Ltd.
Building 1, Spreadtrum Center, No.2288, Zuchongzhi Rd
Shanghai 201203
The build number seems to be G4H_EMMC_OVERSEA_240_5M_akq_IPS_w_2020.07.09_09.55.00, on the watch depicted in the pictures.
I also have another similar device whish has build number as G4H_EMMC_240_5M_YDE_A36H_OVERSEA_LINE_20200506_10.35.00
Looks like the Nokia 3310-4G is also powered by the same chipset
https://www.gizmochina.com/2018/03/26/nokia-3310-4g-packs-spreadtrum-sc9820-chipset/
The phone seems to be using "YunOS" which is some version of AOSP, also called AliOS (Alibaba version)
Does anyone have the Nokia 3310-4G model #TA-1077
Click to expand...
Click to collapse
Try this tutorial to enable adb/root: https://github.com/eisaev/SuperSUInstaller

Hi! I got a G4H(KGG KG70) watch as well for my kid, problem is that touch does work, every second time I turn on/off the screen. It worked perfectly before, but now it only works every second time I turn on/off the screen. I think that might be a software issue.
I've just started to research so haven't got far, any things I might could try?
The watch works perfectly other then that, but sometimes have trouble get the location.

Hello there. I bought this watch for my child, but when I want to use another tracking program other than the se tracker program, I cannot change the ip number. Can you help me with this?

aşağıdaki kod çalışmıyor.
Find my kids application server: pw,123456,ip,tcp.findmykids.org,8001#

afyden2018 said:
when I want to use another tracking program other than the se tracker program, I cannot change the ip number.
Click to expand...
Click to collapse
Protocols for "SeTracker" and "Где мои дети" are different. It is not the matter of changing IP, findmykids.org won't understand data sent by SeTracker service from watch.
Also "Где мои дети" is compiled only for Android 5.0+ while this watch runs Android 4.4. So event with watch rooted (described in this thread) you cannot install proper service on watch that will report location to findmykids.org. Maybe they had some Android 4.4 compatible version in the past, but it is highly unlikely this will still work today.

bbkr said:
Protocols for "SeTracker" and "Где мои дети" are different. It is not the matter of changing IP, findmykids.org won't understand data sent by SeTracker service from watch.
Also "Где мои дети" is compiled only for Android 5.0+ while this watch runs Android 4.4. So event with watch rooted (described in this thread) you cannot install proper service on watch that will report location to findmykids.org. Maybe they had some Android 4.4 compatible version in the past, but it is highly unlikely this will still work today.
Click to expand...
Click to collapse
Since I couldn't find any more resources about g4h, I asked for help under this topic. The link to the watch I actually bought is below. If I can change the server of the watch with the sms sent to the watch, maybe I can switch to an application other than tracker. Engineering mode opens but I don't know how to do it.
https://tr.aliexpress.com/item/1005002878573395.html?spm=a2g0s.9042311.0.0.1cc04c4dVwpHt3

I hope someone here can help me out. I recently purchased this watch for my daughter and have purchased a Lucky Mobile SIM card to use with it. I’ve not been able to get the watch to connect to the mobile network. The person that is trying to help me from their end has been less than helpful lol. He’s now insisting that I’m putting the SIM card in wrong and I have had to send a video to prove to him that isn’t the case.
I went into the network portions and noticed they had only set up an APN for Bell, so now I have set up the APN for lucky mobile. Yet still no luck (groan)
Can anyone give me some suggestions on how to get this thing to work. Or tell me what provider you went with (in Canada) to get this thing to work?
I really appreciate any help I can get at this point.

I sent pw,123456,DEVELOP,1# to my device and I can connect to it via adb. Once 'adb -d shell', I am in the system but don't know what to do. On the watch's system, process 'adbd' runs under user 'shell'.
A bit more info of the watch (I am not an Android expert)
# ./adb -d shell
[email protected]:/ $ cat /proc/version
Linux version 4.4.83+ ([email protected]) (gcc version 4.8 (GCC) ) #1 SMP PREEMPT Thu Aug 22 16:00:23 CST 2019
[email protected]:/ $ cat /proc/cpuinfo
processor : 0
model name : ARMv8 Processor
BogoMIPS : 30.72
Features : half thumb fastmult vfp edsp neon vfpv3 tls vfpv4 idiva idivt vfpd32 lpae aes pmull sha1 sha2 crc32
CPU implementer : 0x41
CPU architecture: 8
CPU variant : 0x0
CPU part : 0xd03
CPU revision : 4
processor : 1
model name : ARMv8 Processor
BogoMIPS : 30.72
Features : half thumb fastmult vfp edsp neon vfpv3 tls vfpv4 idiva idivt vfpd32 lpae aes pmull sha1 sha2 crc32
CPU implementer : 0x41
CPU architecture: 8
CPU variant : 0x0
CPU part : 0xd03
CPU revision : 4
Hardware : Spreadtrum SC9820e
Revision : 0000
Serial : 0000000000000000
[email protected]:/ $ cat /proc/meminfo
MemTotal: 438400 kB
MemFree: 102396 kB
MemAvailable: 257892 kB
Buffers: 5124 kB
Cached: 130896 kB
SwapCached: 4052 kB
...
[email protected]:/ $ df
Filesystem Size Used Avail Free Blksize
/dev 214.1M 128.0K 213.9M 213.9M 4096
/sys/fs/cgroup 214.1M 12.0K 214.1M 214.1M 4096
/mnt/asec 214.1M 0.0K 214.1M 214.1M 4096
/mnt/obb 214.1M 0.0K 214.1M 214.1M 4096
/system 484.3M 294.0M 180.3M 190.3M 4096
/data 2.7G 9.6M 2.7G 2.7G 4096
/cache 143.6M 168.0K 140.5M 143.5M 4096
/productinfo 928.0K 96.0K 732.0K 832.0K 4096
/mnt/shell/emulated 2.7G 9.6M 2.7G 2.7G 4096
Also, I found some useful tools like "am" and "pm"

Found a useful thread: https://forum.xda-developers.com/t/...-and-rebrands-kinyo-garett-lemfo-etc.4332727/

Hi

ghatothkach said:
hi
I got my hands on this smartwatch
https://www.amazon.com/gp/product/B07XTCGD7B
It seems to be a "G4H" kids smartwatch, which seems to be available from multiple vendors.
It seems to be running Android...
It has a pogopin based charging adapter, where the middle 3 pins are not usually connected but seem to be "USB pins"
I opened this up and I was able to find a ribbon cable G4E-USB-FPC-V0.1. / F6-2C connecting those pins to the PCB.
I bet someone make a USB data cable which also has connections to those middle pins.
[ Perhaps this one https://www.alibaba.com/product-detail/high-quality-custom-male-gold-plating_62427401556.html ]
Has anyone tried to hack this one yet ? Anyone knows what those middle 3 pins are ?
Any hints on putting this device into recovery mode or fastboot mode ?
G
Update: 2020-09-26
I got a 4 pin smartwatch fast charging cable
from EBAY. This now Charges and also gets me to connect to the watch as USB... I can do a lsusb on the device from my Rpi Linux.
lsusb -v
Code:
Bus 001 Device 065: ID 1782:5d03 Spreadtrum Communications Inc.
Couldn't open device, some information will be missing
Device Descriptor:
bLength 18
bDescriptorType 1
bcdUSB 2.00
bDeviceClass 0
bDeviceSubClass 0
bDeviceProtocol 0
bMaxPacketSize0 64
idVendor 0x1782 Spreadtrum Communications Inc.
idProduct 0x5d03
bcdDevice 4.04
iManufacturer 1
iProduct 2
iSerial 3
bNumConfigurations 1
Configuration Descriptor:
bLength 9
bDescriptorType 2
wTotalLength 0x0020
bNumInterfaces 1
bConfigurationValue 1
iConfiguration 4
bmAttributes 0xc0
Self Powered
MaxPower 500mA
Interface Descriptor:
bLength 9
bDescriptorType 4
bInterfaceNumber 0
bAlternateSetting 0
bNumEndpoints 2
bInterfaceClass 8 Mass Storage
bInterfaceSubClass 6 SCSI
bInterfaceProtocol 80 Bulk-Only
iInterface 5
Endpoint Descriptor:
bLength 7
bDescriptorType 5
bEndpointAddress 0x81 EP 1 IN
bmAttributes 2
Transfer Type Bulk
Synch Type None
Usage Type Data
wMaxPacketSize 0x0200 1x 512 bytes
bInterval 0
Endpoint Descriptor:
bLength 7
bDescriptorType 5
bEndpointAddress 0x01 EP 1 OUT
bmAttributes 2
Transfer Type Bulk
Synch Type None
Usage Type Data
wMaxPacketSize 0x0200 1x 512 bytes
bInterval 1
PS: India based dev's, (we cannot really stop made-in-china, but we can at-least reflash all the made-in-china with AOSP)
[PS => Political Statement :cyclops: )
Some more Info:
https://omg-solutions.com/gps-tracker/latest-singapore-waterproof-video-call-gps-kids-watch-gps033w/
https://riseofsmart.com/smartwatche...ch-display-camera-take-video-smartwatch-kids/
https://www.flipkart.com/arroha-kids-smart-watch-gps-wifi-4g-smartwatch/p/itm40654c01873c8
https://naijarom.com/infinity-chinese-miracle-2-spd-v124
https://forum.hovatek.com/thread-21776.html
https://www.gadgetvictims.com/2017/07/diy-magnetic-charger-for-kingwear-lemfo.html
LEMFO is one of the manufacturers/brand names
Its using SC9820E from http://www.unisoc.com/sc9820e
https://sc9820e-datasheet.com/
The Wireless MAC on the device starts with
"40-45-DA" which is for...
Spreadtrum Communications (Shanghai) Co., Ltd.
Building 1, Spreadtrum Center, No.2288, Zuchongzhi Rd
Shanghai 201203
The build number seems to be G4H_EMMC_OVERSEA_240_5M_akq_IPS_w_2020.07.09_09.55.00, on the watch depicted in the pictures.
I also have another similar device whish has build number as G4H_EMMC_240_5M_YDE_A36H_OVERSEA_LINE_20200506_10.35.00
Looks like the Nokia 3310-4G is also powered by the same chipset
https://www.gizmochina.com/2018/03/26/nokia-3310-4g-packs-spreadtrum-sc9820-chipset/
The phone seems to be using "YunOS" which is some version of AOSP, also called AliOS (Alibaba version)
Does anyone have the Nokia 3310-4G model #TA-1077
Click to expand...
Click to collapse
You can putting that device to recovery mode or fastboot mode like this with a application name power toggles *required root

i have the samw watches, i have installed shotcut creator, but when i'm starting "settings" app it launching an ROM settings and i could not enable ADB to root and then flash my watches, i have tried to use engineer mode but it isn't doing anything really useful

wait, i know a way, i think i can enable ADB via "Hidden MIUI settings" and it's not for MIUI only, i tesetd it works on custom roms

Related

Making the Shift compatible to Win XP

As the title notes, it will be a good ideea to focus our efforts in making this possible. Any ideeas are welcomed and in this stage I would like that users (who already tried installing XP on the Shift) write their experieces here.
Making some sort of driver for the touchscreen imput should be our first priority. If someone can find more specific informations about the touchscreen's controller and some chipset codes it would be a good place to start.
I'm waiting for my Shift to arrive (something like a week or so) in order to get the work started.
hey dude greetings,
I have installed a dual boot XP SP2 with OEM shift Vista successfully; however there are some anomalies; the obvious lack off graphics drivers, sound etc are there. I have managed to get drivers for most of the components; however the SDIO wireless card is not even detected BT is detected if you activate it first from Vista Shag then reboot back to XP. The weird thing is that no HID components are actually detected i.e. pen device etc. The monitor tab under device manager is interesting; it displays 3x 1024*768 digital lcd panel. I will try and a device dump of hardware ids and attach it to this thread; maybe that will give us a clue to controller chip sets.
BUS report
Report-Date = 27-03-2008 (D-M-Y)
PC-Model = HTC SHIFT
=== F u l l R e p o r t ================================================
Bus 0 (PCI Express), Device Number 0, Device Function 0
Vendor 8086h Intel Corporation
Device 27A0h 955XM/945GM/PM/GMS/940GML Express Processor to DRAM Controller
Command 0006h (Memory Access, BusMaster)
Status 2090h (Has Capabilities List, Supports Back-To-Back Trans., Received Master Abort, Fast Timing)
Revision 03h, Header Type 00h, Bus Latency Timer 00h
Self test 00h (Self test not supported)
PCI Class Bridge, type PCI to HOST
Subsystem ID 10015567h Unknown
Subsystem Vendor 5567h Unknown
New Capabilities List Present:
Vendor-Dependant Capability
Bus 0 (PCI Express), Device Number 2, Device Function 0
Vendor 8086h Intel Corporation
Device 27A2h Mobile 945GM/GU Express Integrated Graphics Controller
Command 0007h (I/O Access, Memory Access, BusMaster)
Status 0090h (Has Capabilities List, Supports Back-To-Back Trans., Fast Timing)
Revision 03h, Header Type 80h, Bus Latency Timer 00h
Self test 00h (Self test not supported)
PCI Class Display, type VGA
Subsystem ID 10015567h Unknown
Subsystem Vendor 5567h Unknown
Address 0 is a Memory Address (anywhere in 0-4Gb) : CFE80000h
Address 1 is an I/O Port : 0000EC00h
Address 2 is a Memory Address (anywhere in 0-4Gb, Prefetchable) : D0000000h
Address 3 is a Memory Address (anywhere in 0-4Gb) : CFE40000h
New Capabilities List Present:
Message Signalled Interrupt Capability
MSI is enabled
MSI function can generate 32-bit addresses
Power Management Capability, Version 1.1
Does not support low power State D1 or D2
Does not support PME# signalling
Current Power State : D0 (Device operational, no power saving)
Bus 0 (PCI Express), Device Number 2, Device Function 1
Vendor 8086h Intel Corporation
Device 27A6h Mobile 945GM/GU Express Integrated Graphics Controller
Command 0007h (I/O Access, Memory Access, BusMaster)
Status 0090h (Has Capabilities List, Supports Back-To-Back Trans., Fast Timing)
Revision 03h, Header Type 80h, Bus Latency Timer 00h
Self test 00h (Self test not supported)
PCI Class Display, type Other
Subsystem ID 10015567h Unknown
Subsystem Vendor 5567h Unknown
Address 0 is a Memory Address (anywhere in 0-4Gb) : FEA80000h
New Capabilities List Present:
Power Management Capability, Version 1.1
Does not support low power State D1 or D2
Does not support PME# signalling
Current Power State : D0 (Device operational, no power saving)
Bus 0 (PCI Express), Device Number 27, Device Function 0
Vendor 8086h Intel Corporation
Device 27D8h 82801G (ICH7 Family) High Definition Audio
Command 0006h (Memory Access, BusMaster)
Status 0010h (Has Capabilities List, Fast Timing)
Revision 02h, Header Type 00h, Bus Latency Timer 00h
Self test 00h (Self test not supported)
Cache line size 32 Bytes (8 DWords)
PCI Class Multimedia, type Hi-definition Audio
Subsystem ID 10015567h Unknown
Subsystem Vendor 5567h Unknown
Address 0 is a Memory Address (anywhere in 64-bit space) : CFE3C000h
System IRQ 19, INT# B
New Capabilities List Present:
Power Management Capability, Version 1.1
Does not support low power State D1 or D2
Supports PME# signalling from mode(s) D0, D3hot, D3cold
PME# signalling is currently disabled
Current Power State : D0 (Device operational, no power saving)
3.3v AUX Current required : 55mA
Message Signalled Interrupt Capability
MSI is disabled
MSI function can generate 64-bit addresses
PCI Express Capability, Version 1
Device/Port Type :
Root Complex Integrated Endpoint Device
Device Control :
Unsupported Request Severity is Non-Fatal
Device Status :
AUX Power Detected
Link Capabilities :
Maximum Link Speed : Unknown (00h)!!
Maximum Link Width : xReserved
Link Port Number : 0
Link Control :
Asynchronous Clocking in Use
Link Status :
Current Link Speed : Unknown (00)!!
Current Link Width : x0
Bus 0 (PCI Express), Device Number 29, Device Function 0
Vendor 8086h Intel Corporation
Device 27C8h 82801G (ICH7 Family) USB Universal Host Controller
Command 0005h (I/O Access, BusMaster)
Status 0280h (Supports Back-To-Back Trans., Medium Timing)
Revision 02h, Header Type 80h, Bus Latency Timer 00h
Self test 00h (Self test not supported)
PCI Class Serial, type USB (UHCI)
Subsystem ID 10015567h Unknown
Subsystem Vendor 5567h Unknown
Address 4 is an I/O Port : 0000E480h
System IRQ 21, INT# A
Bus 0 (PCI Express), Device Number 29, Device Function 1
Vendor 8086h Intel Corporation
Device 27C9h 82801G (ICH7 Family) USB Universal Host Controller
Command 0005h (I/O Access, BusMaster)
Status 0280h (Supports Back-To-Back Trans., Medium Timing)
Revision 02h, Header Type 00h, Bus Latency Timer 00h
Self test 00h (Self test not supported)
PCI Class Serial, type USB (UHCI)
Subsystem ID 10015567h Unknown
Subsystem Vendor 5567h Unknown
Address 4 is an I/O Port : 0000E800h
System IRQ 23, INT# B
Bus 0 (PCI Express), Device Number 29, Device Function 2
Vendor 8086h Intel Corporation
Device 27CAh 82801G (ICH7 Family) USB Universal Host Controller
Command 0005h (I/O Access, BusMaster)
Status 0280h (Supports Back-To-Back Trans., Medium Timing)
Revision 02h, Header Type 00h, Bus Latency Timer 00h
Self test 00h (Self test not supported)
PCI Class Serial, type USB (UHCI)
Subsystem ID 10015567h Unknown
Subsystem Vendor 5567h Unknown
Address 4 is an I/O Port : 0000E880h
System IRQ 18, INT# C
Bus 0 (PCI Express), Device Number 29, Device Function 7
Vendor 8086h Intel Corporation
Device 27CCh 82801G (ICH7 Family) USB 2.0 Enhanced Host Controller
Command 0106h (Memory Access, BusMaster, System Errors)
Status 0290h (Has Capabilities List, Supports Back-To-Back Trans., Medium Timing)
Revision 02h, Header Type 00h, Bus Latency Timer 00h
Self test 00h (Self test not supported)
PCI Class Serial, type USB 2.0 (EHCI)
Subsystem ID 10015567h Unknown
Subsystem Vendor 5567h Unknown
Address 0 is a Memory Address (anywhere in 0-4Gb) : CFE3BC00h
System IRQ 22, INT# D
New Capabilities List Present:
Power Management Capability, Version 1.1
Does not support low power State D1 or D2
Supports PME# signalling from mode(s) D0, D3hot, D3cold
PME# signalling is currently disabled
Current Power State : D0 (Device operational, no power saving)
3.3v AUX Current required : 375mA
USB 2.0 EHCI Debug Port Capability
Bus 0 (PCI Express), Device Number 30, Device Function 0
Vendor 8086h Intel Corporation
Device 2448h 82801GBM Hub Interface to PCI Bridge (ICH7-M B0 step)
Command 0107h (I/O Access, Memory Access, BusMaster, System Errors)
Status 0010h (Has Capabilities List, Fast Timing)
Revision E2h, Header Type 01h, Bus Latency Timer 00h
Self test 00h (Self test not supported)
PCI Class Bridge, type PCI to PCI (Subtractive Decode)
PCI Bridge Information:
Primary Bus Number 0, Secondary Bus Number 1, Subordinate Bus Number 1
Secondary Bus Command 0002h ()
Secondary Bus Status 2280h (Supports Back-To-Back Trans., Received Master Abort, Medium Timing)
Secondary Bus Latency 20h
I/O Port Range Passed to Secondary Bus : None
Memory Range Passed to Secondary Bus : CFF00000h to CFFFFFFFh
Prefetchable Memory Range Passed to Secondary Bus : None
New Capabilities List Present:
Subsystem ID & Subsystem Vendor ID Capability
SSVID : 5567h
SSID : 1001h
Bus 0 (PCI Express), Device Number 31, Device Function 0
Vendor 8086h Intel Corporation
Device 27B9h 82801GBM (ICH7-M) LPC Interface Controller
Command 0007h (I/O Access, Memory Access, BusMaster)
Status 0210h (Has Capabilities List, Medium Timing)
Revision 02h, Header Type 80h, Bus Latency Timer 00h
Self test 00h (Self test not supported)
PCI Class Bridge, type PCI to ISA
Subsystem ID 10015567h Unknown
Subsystem Vendor 5567h Unknown
New Capabilities List Present:
Vendor-Dependant Capability
Bus 0 (PCI Express), Device Number 31, Device Function 1
Vendor 8086h Intel Corporation
Device 27DFh 82801G (ICH7 Family) Ultra ATA Storage Controller
Command 0005h (I/O Access, BusMaster)
Status 0280h (Supports Back-To-Back Trans., Medium Timing)
Revision 02h, Header Type 00h, Bus Latency Timer 00h
Self test 00h (Self test not supported)
PCI Class Storage, type IDE (ATA)
PCI EIDE Controller Features :
BusMaster EIDE is supported
Primary Channel is at I/O Port 01F0h and IRQ 14
Secondary Channel is at I/O Port 0170h and IRQ 15
Subsystem ID 10015567h Unknown
Subsystem Vendor 5567h Unknown
Address 0 is an I/O Port : 00000000h
Address 1 is an I/O Port : 00000000h
Address 2 is an I/O Port : 00000000h
Address 3 is an I/O Port : 00000000h
Address 4 is an I/O Port : 0000FFA0h
second Half
Bus 0 (PCI Express), Device Number 31, Device Function 3
Vendor 8086h Intel Corporation
Device 27DAh 82801G (ICH7 Family) SMBus Controller
Command 0001h (I/O Access)
Status 0280h (Supports Back-To-Back Trans., Medium Timing)
Revision 02h, Header Type 00h, Bus Latency Timer 00h
Self test 00h (Self test not supported)
PCI Class Serial, type SMBus Controller
Subsystem ID 10015567h Unknown
Subsystem Vendor 5567h Unknown
Address 4 is an I/O Port : 0000FFE0h
System IRQ 17, INT# B
Bus 1 (PCI), Device Number 6, Device Function 0
Vendor 1947h Unknown
Device 4743h Unknown
Command 0006h (Memory Access, BusMaster)
Status 0210h (Has Capabilities List, Medium Timing)
Revision 09h, Header Type 00h, Bus Latency Timer 40h
Minimum Bus Grant 01h, Maximum Bus Latency 0Ch
Self test 00h (Self test not supported)
Cache line size 32 Bytes (8 DWords)
PCI Class System, type SD Host Controller (Without DMA)
Subsystem ID 44332211h Unknown
Subsystem Vendor 2211h Unknown
Address 0 is a Memory Address (anywhere in 0-4Gb) : CFFFFE00h
Address 1 is a Memory Address (anywhere in 0-4Gb) : CFFFFC00h
System IRQ 20, INT# A
New Capabilities List Present:
Unknown Capability (Code 00h)!!
IRQ Summary: IRQs 14,15,17,18,19,20,21,22,23 are used by PCI devices
Shared IRQs: There are no shared PCI IRQs
IRQ control is currently managed by the system APIC controller - IRQ info is
not actual hardware settings...
PCI Busses, Devices and Device Functions Tree
--Bus 0 (PCI Express)
|__Device 00h 8086h:27A0h PCI to HOST Bridge
|__Device 02h
| |__Function 0 8086h:27A2h VGA Display
| |__Function 1 8086h:27A6h Other Display
|__Device 1Bh 8086h:27D8h Hi-definition Audio Multimedia
|__Device 1Dh
| |__Function 0 8086h:27C8h USB (UHCI) Serial
| |__Function 1 8086h:27C9h USB (UHCI) Serial
| |__Function 2 8086h:27CAh USB (UHCI) Serial
| |__Function 7 8086h:27CCh USB 2.0 (EHCI) Serial
|__Device 1Eh 8086h:2448h PCI to PCI (Subtractive Decode) Bridge > Bus 1
|__Device 1Fh
|__Function 0 8086h:27B9h PCI to ISA Bridge
|__Function 1 8086h:27DFh IDE (ATA) Storage
|__Function 3 8086h:27DAh SMBus Controller Serial
--Bus 1 (PCI)
|__Device 06h 1947h:4743h SD Host Controller (Without DMA) System
A total of 13 Devices Found
those damn suckers at htc romania told me that my shift will be comming from sweeden and it will take another 2 weeks untill i get my own one. Untill then I have nothing to play with and experiment.
In order to get the support for wlan and touchpad I think the first test would be to see if we can port the drivers from vista to the xp part of the device. Furthermore, there are some HTC made management programs that need to be implemented in xp if we're going to ask for more.
Thanks for the hardware ID's, I'm waiting for my unit to come and untill then I'll try to collect as much info as possible.
LE
Lol, shoudn't shift run on a intel GMA950 ?
Bus 0 (PCI Express), Device Number 2, Device Function 1
Vendor 8086h Intel Corporation
Device 27A6h Mobile 945GM/GU Express Integrated Graphics Controller
keep the work gong everyone. we will try to help also.
facdemol said:
those damn suckers at htc romania told me that my shift will be comming from sweeden and it will take another 2 weeks untill i get my own one. Untill then I have nothing to play with and experiment.
In order to get the support for wlan and touchpad I think the first test would be to see if we can port the drivers from vista to the xp part of the device. Furthermore, there are some HTC made management programs that need to be implemented in xp if we're going to ask for more.
Thanks for the hardware ID's, I'm waiting for my unit to come and untill then I'll try to collect as much info as possible.
LE
Lol, shoudn't shift run on a intel GMA950 ?
Bus 0 (PCI Express), Device Number 2, Device Function 1
Vendor 8086h Intel Corporation
Device 27A6h Mobile 945GM/GU Express Integrated Graphics Controller
Click to expand...
Click to collapse
I have used the vista drivers for G sensor on the hard drive, the graphics and sound drivers dont appear to work with XP, however this may be the inf file as apposed to the bins. The proble is I have the drivers for the SDIO wifi but XP dosent see the hardware, I have forced the drivers on in a hope to see if the OS responds but it doesnt work. The touch pad works, the pen or touch screen does not work and again like the wifi driver it does not appear to be detected by the OS. I have been unable to force the vista HID pen driver to XP as in add hardware there is no option for this (HID device) I guess the OS needs to detect it. Looking through the scan of the pci bus it appears HTC have not yet added there vendor id to the PCI Vendor and Device Lists which is a bit weird Over the weekend if I get a chance I might try to have a look at the vista drivers (dlls) to see what is in them. Also the Shag control service does not appear to like installing or running on XP which could be a bit of a bummer. Although I think Comonex has rei the Shag bins so i am pretty confident Comonex might be able to help us getting that working on XP. I just trying to figure out how to get the OS to at least detect the missing hardware.
thanks faisal.husain for working in this direction.
The key with touchscreen recognised is to have Shag program made compatible with xp. Unlike tablet pc's this device seems to operate bluetooth, wlan and HID devices in a more "pocket pc" manner. They are simply powered off when not in use, ore not connected. This is a hardware based situation and the role of the Shag thing is to power them in order to have the operating system see them. So from what I hear from you I thinks trying to have the Shag compatible with XP is another place to start. The inf files would be easily made compatible with xp then...
Graphic Driver
Here is the link for the graphics card.
http://downloadcenter.intel.com/fil...XP+Professional&lang=eng&strOSs=44&submit=Go!
USB2 to Fast Ethernet Adapter
Here is the USB network driver link;
http://www.asix.com.tw/products.php?op=pItemdetail&PItemID=86;71;101
Synaptics Driver Software
Here's the touchpad
http://drivers.synaptics.com/Synaptics_Driver_v10_1_8_XP32.exe
Intel Mainboard / USB Subsystem and Memory drivers + Chipset correct drivers
Here is the link to the intel chipset for our shifts.
http://downloadcenter.intel.com/fil...XP+Professional&lang=eng&strOSs=44&submit=Go!
Wow. Time to move to XP is near....
I got everything working except the Touchscreen IIRC (and the shagctrl).
Stupidly I didn't save the driver links, but I think the TouchScreen is the big one we need to worry about.
I installed alongside Vista, and so for one of the devices that I couldn't find I just pointed it at c:\windows\inf for the driver, that was one of the 'HTC' system devices.
I even got the external ethernet working too.
If someone can get the touchscreen working, i'll dig out the other links.
P
XP
Yeah I got to the same position too, but failed on the Touch part.
modaco said:
I got everything working except the Touchscreen IIRC (and the shagctrl).
Click to expand...
Click to collapse
just to confirm, are you saying that you got the Wifi, SD, and BT devices working under XP?
and the ONLY device that isn't currently working under XP is the touchscreen?
facdemol said:
those damn suckers at htc romania told me that my shift will be comming from sweeden and it will take another 2 weeks untill i get my own one. Untill then I have nothing to play with and experiment.
Bus 0 (PCI Express), Device Number 2, Device Function 1
Vendor 8086h Intel Corporation
Device 27A6h Mobile 945GM/GU Express Integrated Graphics Controller
Click to expand...
Click to collapse
I got mine already a month ago from HTC Romania.
I cannot say I am superhappy with the Shift, but their service is OK. They helped me quickly and professionally with a problem I had with the touchscreen.
Was my mistake anyway by putting it on too fast.
Huib
P.s. I even may consider selling it and take this P1620 Fujitsu.
As a future buyer of Shift.. what didn't you like about the device? Putting the not so good battery life aside.
It seems by the time i get my own shift, people here will have already sort out most of the problems and I will be left without job
facdemol said:
As a future buyer of Shift.. what didn't you like about the device? Putting the not so good battery life aside.
It seems by the time i get my own shift, people here will have already sort out most of the problems and I will be left without job
Click to expand...
Click to collapse
Too much hassle with the small screen. I use fingers for browsing one time, then I need the stylus another time.
I have a continuous battle when browsing the internet or reading pda files etc.
I use a lot of Google tools, like Calendar and docs.
I must say the software helps a lot, but still. The F11 key does not exist, so I have to find a solution to switch full screen.
Now, pls believe me on my word: I have no commercial or emotional motives to say this: But I think I go for the somewhat bigger/faster Fujitsu P1620. I know the screen does not work well with fingers but that is the only disadvantage. I need those two inches real estate more.
But I repeat: It can be my age. I wanted the shift mainly for my boring, long, economy class flights. A normal portable can not be folded out, because the chair in front of you can be put down.
And I was hoping for a working XP. I have a lot of software that I do not want to buy once more, like the old Office 2003.
This disk, with Vista, keeps spinning and spinnging, even with indexing switched off. VLC player has a battle to play normally. It works now, but..
But maybe I will change my mind.
When I have
1. An extra battery
2. a 32 gigabyte SD card.
3 And..... thanks to you guys, a really working Winmo with Wifi, synchronising outlook, SD card OK etc etc.
Huib
Do you have problems running Office 2003 under Vista? Normally it runs fine.

Leaked Android/G1 romdump

Okay, so i hear that pretty much beta-g1's are given to call centers and support points etcetera. What keeps the romdumps?
It's time to port this little bastard!
FYI: Sorry for the dissapointment from the topic title
awh man! you got me all excited. whatever its not like my little wing would handle android anyway.
im pretty sure nobody wants to speak up because of what happen to black93300zx. he got a pre-release att fuze and everyone was going crazy.
kidnamedAlbert said:
awh man! you got me all excited. whatever its not like my little wing would handle android anyway.
im pretty sure nobody wants to speak up because of what happen to black93300zx. he got a pre-release att fuze and everyone was going crazy.
Click to expand...
Click to collapse
well, i would suggest, make a new username, just dump the rom. and then don't log in to that account anymore.
kidnamedAlbert said:
awh man! you got me all excited. whatever its not like my little wing would handle android anyway.
im pretty sure nobody wants to speak up because of what happen to black93300zx. he got a pre-release att fuze and everyone was going crazy.
Click to expand...
Click to collapse
Heh, I think the only pre-release phone I'll buy from now on is something for AT&T with Android. Despite the last reaction, you can bet if I get my hands on something I'll leak info. Maybe THIS TIME someone will believe me. ;-)
Very good , Dump dump dump it
I'm also interested in seeing a rom dump!.... and also buying a device if someone is selling it yet
what are the chances of putting the android rom on my tilt?
thodge21 said:
what are the chances of putting the android rom on my tilt?
Click to expand...
Click to collapse
Android has already been run on a Tilt, it's far from stable but they're working on it.
http://www.youtube.com/watch?v=Q2rByiug8LU
G1 for Sale
pof said:
I'm also interested in seeing a rom dump!.... and also buying a device if someone is selling it yet
Click to expand...
Click to collapse
I actually ordered the G1 and am going to sell it. It is currently on ebay or you can contact me with a pm for the price.
Black93300ZX said:
Android has already been run on a Tilt, it's far from stable but they're working on it.
http://www.youtube.com/watch?v=Q2rByiug8LU
Click to expand...
Click to collapse
so is the sdk package released with a non-beta version or is it just an sdk-package?
http://code.google.com/android/download.html
thodge21 said:
so is the sdk package released with a non-beta version or is it just an sdk-package?
http://code.google.com/android/download.html
Click to expand...
Click to collapse
Hell if I know, I just knew it was on the Tilt and nothing more than that.
lol. okay. i'll download and see if i can figure it out. let you know what i find.
looks like the programing language is java...which i haven't learned yet... but it does have an android emulator aswell as the android structure, but no straight forward rom. someone could probably pull out the platform and cook a rom with the proper know how though.
I'll give it a try when I get mine Oct. 22. Although, I'm sure someone will have dumped it and uploaded it here by then. It might be tricky to copy from the device itself. This will be a totally different experience than WM. I am not too good with Linux...especially the mobile version, lol! I'll definitely give it a try. Does anyone know how to get the OS from the device itself?
sino8r said:
Does anyone know how to get the OS from the device itself?
Click to expand...
Click to collapse
IMHO the contents of /lib/modules/* will be the most interesting
thing to look at.
bumping
This deserves a bump.. camera+power gets me to the rom on the G1, but I'm not seeing anything in HTCFlasher, as usbserial isn't detecting my g1. pof, you around?
galtoid said:
I'm not seeing anything in HTCFlasher, as usbserial isn't detecting my g1. pof, you around?
Click to expand...
Click to collapse
Can you post the 'lsusb' and 'lsusb -vvv' output ?
cr2 said:
Can you post the 'lsusb' and 'lsusb -vvv' output ?
Click to expand...
Click to collapse
I can adb to it fine, here's a lsusb -vvv diff:
Code:
--- lsusb-unplugged 2008-10-25 18:06:42.000000000 -0700
+++ lsusb-plugged 2008-10-25 18:26:02.000000000 -0700
@@ -1,4 +1,93 @@
+Bus 004 Device 004: ID 0bb4:0c02 High Tech Computer Corp.
+Device Descriptor:
+ bLength 18
+ bDescriptorType 1
+ bcdUSB 1.02
+ bDeviceClass 0 (Defined at Interface level)
+ bDeviceSubClass 0
+ bDeviceProtocol 0
+ bMaxPacketSize0 64
+ idVendor 0x0bb4 High Tech Computer Corp.
+ idProduct 0x0c02
+ bcdDevice 1.00
+ iManufacturer 3 HTC
+ iProduct 2 Android Phone
+ iSerial 1 HT839GZ00000
+ bNumConfigurations 1
+ Configuration Descriptor:
+ bLength 9
+ bDescriptorType 2
+ wTotalLength 55
+ bNumInterfaces 2
+ bConfigurationValue 1
+ iConfiguration 0
+ bmAttributes 0x80
+ (Bus Powered)
+ MaxPower 256mA
+ Interface Descriptor:
+ bLength 9
+ bDescriptorType 4
+ bInterfaceNumber 0
+ bAlternateSetting 0
+ bNumEndpoints 2
+ bInterfaceClass 8 Mass Storage
+ bInterfaceSubClass 6 SCSI
+ bInterfaceProtocol 80 Bulk (Zip)
+ iInterface 0
+ Endpoint Descriptor:
+ bLength 7
+ bDescriptorType 5
+ bEndpointAddress 0x01 EP 1 OUT
+ bmAttributes 2
+ Transfer Type Bulk
+ Synch Type None
+ Usage Type Data
+ wMaxPacketSize 0x0200 1x 512 bytes
+ bInterval 0
+ Endpoint Descriptor:
+ bLength 7
+ bDescriptorType 5
+ bEndpointAddress 0x81 EP 1 IN
+ bmAttributes 2
+ Transfer Type Bulk
+ Synch Type None
+ Usage Type Data
+ wMaxPacketSize 0x0200 1x 512 bytes
+ bInterval 0
+ Interface Descriptor:
+ bLength 9
+ bDescriptorType 4
+ bInterfaceNumber 1
+ bAlternateSetting 0
+ bNumEndpoints 2
+ bInterfaceClass 255 Vendor Specific Class
+ bInterfaceSubClass 66
+ bInterfaceProtocol 1
+ iInterface 0
+ Endpoint Descriptor:
+ bLength 7
+ bDescriptorType 5
+ bEndpointAddress 0x02 EP 2 OUT
+ bmAttributes 2
+ Transfer Type Bulk
+ Synch Type None
+ Usage Type Data
+ wMaxPacketSize 0x0200 1x 512 bytes
+ bInterval 0
+ Endpoint Descriptor:
+ bLength 7
+ bDescriptorType 5
+ bEndpointAddress 0x82 EP 2 IN
+ bmAttributes 2
+ Transfer Type Bulk
+ Synch Type None
+ Usage Type Data
+ wMaxPacketSize 0x0200 1x 512 bytes
+ bInterval 0
+Device Status: 0x0000
+ (Bus Powered)
+
Bus 004 Device 001: ID 0000:0000
Device Descriptor:
bLength 18
@@ -62,7 +151,7 @@
Port 1: 0000.0100 power
Port 2: 0000.0100 power
Port 3: 0000.0000
- Port 4: 0000.0100 power
+ Port 4: 0000.0503 highspeed power enable connect
Port 5: 0000.0000
Port 6: 0000.0100 power
Device Status: 0x0003
Second interface ("Vendor Specific Class") should be something usefull.

An I9000 that really needs to be rescued from a brick

I don't normally used the word brick to describe this guy's situation, but it won't boot, it won't turn on, at least visually to my knowledge. He tried making a USB Jig and it still won't go into download mode for an odin flash.
I'm not sure if he built it right, I suggested to him buying a pre-made one to make sure.
Here is his story:
TITLE: Will an USB-JIG save my bricked SGS?
I have an SGS I9000 (international) which I have flashed at least a dozen times without any issues. Today I tried out the CM9 nightly and got stuck in a boot loop.
I tried flashing a new kernel with Odin. Everything seemed fine with Odin, the download completed without issues and the phone rebooted so I unplugged it and pulled the battery to start in in recovery.
Now it won't turn on at all, no Samsung Logo and no battery on the display when plugging it into the charger. Windows is playing sounds when I plug it into my computer though, sometimes it plays the connect/disconnect sounds almost at the same time and sometimes a few seconds apart.
Can I save my phone by building an USB JIG or do I have to send it to Samsung to get it fixed?
Edit: Built a JIG, didn't work =(
From A Thread in /r/Android on Reddit
_____________________________________________
My response
Yes, it should, the SGS is extremely hard to "actually" brick.
http://www.amazon.com/Aftermarket-D...CT0Y/ref=sr_1_2?ie=UTF8&qid=1334438748&sr=8-2
Invest in one of these. Make one yourself or get one fast and easy for $5 on Amazon.
Pull the battery. Pop back in. With out turning it on, place the USB Jig into it and it should load into Download mode.
It takes 2 seconds for it to load into it. You may see the Download mode, you may see this as the screen , you may see NOTHING. It could still be in download mode even if it shows nothing.
Now take out the jig and plug the phone into the computer with the stock Odin flasher already open (started as an Admin (Run as Administrator))
Flash it, should work fine.
_____________________________________________
His Response
Sadly, it didn't work. Nothing happens and odin doesn't find anything if I plug it into the computer after plugging in the JIG.
I'm not getting any notification sounds in Windows when I plug it in anymore either, so it looks like it's really dead now =(
[Comments]
_____________________________________________
I really don't want to give up on his Galaxy S I9000. Could anyone offer any advice from a similar situation? Link to XDA threads, web articles, I'm having a hard time finding information.
I'm the one with the bricked I9000 and here's the latest updates.
I've measured the resistors I used to create the JIG (3x100K + 1K) and they add upp to 300.1K - it seems the resistors I bought aren't of the best quality. From all the info I've gotten on building your own JIG this should be fine, which leaves the pins I've connected it to.
The USB micro B plug I've used is taken from a cable, I can reach pin 5 and 1 in the male plug so I've verified that it's connected to pin 5, I canẗ reach pin 2, 3 and 4 with my multimeter though. If viewed from above, the plug looks like this:
Code:
5 ? 1
---------
? ?
which makes me quite certain the pins are configured like this:
Code:
5 3 1
---------
4 2
If u get on eBay and search i-9000 jig I brought 4 USB jigs for $5. Once they come pull out ur battery put it back in an insert jig wich will put u in download mode. Once bricked u need to go back and install a 3file stock rom then install a cf+root. Once done u should be all good to go back and flash your cm9 thru recovery
Sent from my GT-I9000 using xda premium
I've ordered a JIG from amazon since I can't verify that it's my JIG and not my phone. It'll be here in a week or so (I'm in Sweden) so I guess I'll have to live without my phone until then.
If the JIG doesn't work, it's completely bricked, right?
I've tested some again and I do get notification sounds in windows when plugging the phone in now, so I really hope the JIG from Amazon does the trick!
All the galaxy s series are the hardest phones to completely "brick" it is virtually impossible. Iv recovered my phone from being bricked about 5 times now. The part that is a pain is finding the 3file rom. I wish I had a link for you but I have the files saved on my computer. It doesn't matter if its not an English stock rom you use as long as u get your phone started and install cf+root, then you can get back where u started and install cm9. If u get stuck in boot loop again use 3button combo up+power+home and reboot again this has happened and worked for me on several occasions. I hope this helps
Sent from my GT-I9000 using xda premium
as far as i think this is a problem with ur computer drivers ,had this problem before and resolved it by reinstalling kies ,try it and then connect ur fone in download mode ,should do the trick.i had the problem once also if possible try another computer ,i think if ur phone enters download mode ,ur phone is not dead...the jig should work did a little research earlier for my own phone ,had soft bricked it earlier ,plug in the jig ,enter the download mode flash a stock firmware .the list of stock firmwares is here ,http://forum.xda-developers.com/showthread.php?t=1011901&highlight=stock+rom,just search your region and best of luck
I recieved the JIG from Amazon today and I just tried it without luck =(
Nothing happens when I insert the JIG and Odin doesn't see the phone if I plug it in after trying the JIG.
It seems it is bricked for real, how much do you think it'll cost to have Samsung fix it?
---------- Post added at 05:24 PM ---------- Previous post was at 05:07 PM ----------
I've switched to Linux for some better USB info.
If I insert the battery into the phone and then plug it into my computer I get a message about a new USB device, after about 5 seconds it disconnects again. This only happens on my USB 2.0 ports, not on the USB 3.0 ports.
Code:
Apr 20 17:12:08 galvatron kernel: usb 2-1.8: new high-speed USB device number 7 using ehci_hcd
Apr 20 17:12:13 galvatron kernel: usb 2-1.8: USB disconnect, device number 7
Apr 20 17:12:26 galvatron kernel: usb 2-1.8: new high-speed USB device number 8 using ehci_hcd
Apr 20 17:12:32 galvatron kernel: usb 2-1.8: USB disconnect, device number 8
Apr 20 17:13:27 galvatron kernel: usb 2-1.8: new high-speed USB device number 9 using ehci_hcd
Apr 20 17:13:32 galvatron kernel: usb 2-1.8: USB disconnect, device number 9
I removed and inserted the cord between the connections here, if I leave it in nothing happens after it has disconnected.
If I plug in the JIG before plugging it into the computer however, nothing shows up in my message log.
If I run lsusb -v while it's connected I get this:
Code:
Bus 002 Device 011: ID 04e8:1234 Samsung Electronics Co., Ltd
Device Descriptor:
bLength 18
bDescriptorType 1
bcdUSB 2.00
bDeviceClass 255 Vendor Specific Class
bDeviceSubClass 0
bDeviceProtocol 0
bMaxPacketSize0 64
idVendor 0x04e8 Samsung Electronics Co., Ltd
idProduct 0x1234
bcdDevice 1.00
iManufacturer 1 System MCU
iProduct 2 SEC S5PC110 Test B/D
iSerial 0
bNumConfigurations 1
Configuration Descriptor:
bLength 9
bDescriptorType 2
wTotalLength 32
bNumInterfaces 1
bConfigurationValue 1
iConfiguration 0
bmAttributes 0xc0
Self Powered
MaxPower 50mA
Interface Descriptor:
bLength 9
bDescriptorType 4
bInterfaceNumber 0
bAlternateSetting 0
bNumEndpoints 2
bInterfaceClass 255 Vendor Specific Class
bInterfaceSubClass 0
bInterfaceProtocol 0
iInterface 0
Endpoint Descriptor:
bLength 7
bDescriptorType 5
bEndpointAddress 0x81 EP 1 IN
bmAttributes 2
Transfer Type Bulk
Synch Type None
Usage Type Data
wMaxPacketSize 0x0200 1x 512 bytes
bInterval 0
Endpoint Descriptor:
bLength 7
bDescriptorType 5
bEndpointAddress 0x02 EP 2 OUT
bmAttributes 2
Transfer Type Bulk
Synch Type None
Usage Type Data
wMaxPacketSize 0x0200 1x 512 bytes
bInterval 0
Device Qualifier (for other device speed):
bLength 10
bDescriptorType 6
bcdUSB 2.00
bDeviceClass 255 Vendor Specific Class
bDeviceSubClass 0
bDeviceProtocol 0
bMaxPacketSize0 64
bNumConfigurations 1
Device Status: 0x0001
Self Powered
Since it actually connects and can communicate with my computer over USB it seems there is some life left in it, but since it completely refuses to communicate when inserting the JIG I guess I won't get it into download mode and will have to send it to Samsung to be fixed.
Edit: If I start it with the JIG, plug it into the USB, unplug it and then plug it in again I get the 5s connect/disconnect.
did you ever have it fixed ? I have asimilar problem tried everything I can find from xda , still cant get Odin to detect the phone...
You seem knowledgeable, but I noticed you didn't mention Heimdall after you ran Linux, only that you'd tried odin. Try it if you haven't.
Edit: didn't notice the post times.
Using GT-I9000 my sent Tapatalk 2 from.
I sent it in for service and got an answer after 3 weeks that it was fubar and that I got store credit towards a new phone - ended paying €130 for a Galaxy Nexus instead.
adytum said:
You seem knowledgeable, but I noticed you didn't mention Heimdall after you ran Linux, only that you'd tried odin. Try it if you haven't.
Edit: didn't notice the post times.
Click to expand...
Click to collapse
I never considered trying heimdall since the phone disconnected from the computer after 5s, in retrospect I should perhaps have given it a shot, but I'm quite happy with how everything turned out =)
same problem
HI
I have the same problem and i try the same, but my phone still dead.
My dog disconnect USB cable then i flashing pda, csc and phone files on my phone after this i have same problem..
If somebody now how to fix this, please help me.
Sorry for my english
Nekronomika said:
HI
I have the same problem and i try the same, but my phone still dead.
My dog disconnect USB cable then i flashing pda, csc and phone files on my phone after this i have same problem..
If somebody now how to fix this, please help me.
Sorry for my english
Click to expand...
Click to collapse
Hi new here, but been looking around for awhile.
I have just unbricked my phone that died after I flashed a different phones pit file, totally dead.
Got it back in working condition using Unbrickable Mod by AdamOutler in the Developers forum, have a look at that

usb tether packet frame errors under linux

On usb tether to my linux notebook, I get about 1Mbps down and 14Mbps up. Using the speedtest on the phone, I get 16Mbps down and 6MBPS up. Yes I know these results are not repeatable, but I consistently can't break 1Mbps download on tether. Further down I will show this is related to packet framing errors.
But first, device data. The OnePlus5 is running Android 7.1.1 Oxygen 4.5.10 Oneplus A5000. This is the 128G flash/ 8G ram version.
Notebook data:
Code:
Linux linux-0u81 4.4.79-19-default #1 SMP Thu Aug 10 20:28:47 UTC 2017 (2dd03e8) x86_64 x86_64 x86_64 GNU/Linux
Output of lsusb for the phone follows, but note this message:
iInterface 5 RNDIS Communications Control
** UNRECOGNIZED: 05 24 00 10 01
** UNRECOGNIZED: 05 24 01 00 01
** UNRECOGNIZED: 04 24 02 00
** UNRECOGNIZED: 05 24 06 00 01
Click to expand...
Click to collapse
Code:
Device Descriptor:
bLength 18
bDescriptorType 1
bcdUSB 2.10
bDeviceClass 0 (Defined at Interface level)
bDeviceSubClass 0
bDeviceProtocol 0
bMaxPacketSize0 64
idVendor 0x2a70
idProduct 0xf00e
bcdDevice 4.04
iManufacturer 1 OnePlus
iProduct 2 OnePlus
iSerial 3 (censored)
bNumConfigurations 1
Configuration Descriptor:
bLength 9
bDescriptorType 2
wTotalLength 75
bNumInterfaces 2
bConfigurationValue 1
iConfiguration 4 rndis
bmAttributes 0x80
(Bus Powered)
MaxPower 500mA
Interface Association:
bLength 8
bDescriptorType 11
bFirstInterface 0
bInterfaceCount 2
bFunctionClass 224 Wireless
bFunctionSubClass 1 Radio Frequency
bFunctionProtocol 3 RNDIS
iFunction 7 RNDIS
Interface Descriptor:
bLength 9
bDescriptorType 4
bInterfaceNumber 0
bAlternateSetting 0
bNumEndpoints 1
bInterfaceClass 224 Wireless
bInterfaceSubClass 1 Radio Frequency
bInterfaceProtocol 3 RNDIS
iInterface 5 RNDIS Communications Control
** UNRECOGNIZED: 05 24 00 10 01
** UNRECOGNIZED: 05 24 01 00 01
** UNRECOGNIZED: 04 24 02 00
** UNRECOGNIZED: 05 24 06 00 01
Endpoint Descriptor:
bLength 7
bDescriptorType 5
bEndpointAddress 0x81 EP 1 IN
bmAttributes 3
Transfer Type Interrupt
Synch Type None
Usage Type Data
wMaxPacketSize 0x0008 1x 8 bytes
bInterval 9
Interface Descriptor:
bLength 9
bDescriptorType 4
bInterfaceNumber 1
bAlternateSetting 0
bNumEndpoints 2
bInterfaceClass 10 CDC Data
bInterfaceSubClass 0 Unused
bInterfaceProtocol 0
iInterface 6 RNDIS Ethernet Data
Endpoint Descriptor:
bLength 7
bDescriptorType 5
bEndpointAddress 0x8e EP 14 IN
bmAttributes 2
Transfer Type Bulk
Synch Type None
Usage Type Data
wMaxPacketSize 0x0200 1x 512 bytes
bInterval 0
Endpoint Descriptor:
bLength 7
bDescriptorType 5
bEndpointAddress 0x0f EP 15 OUT
bmAttributes 2
Transfer Type Bulk
Synch Type None
Usage Type Data
wMaxPacketSize 0x0200 1x 512 bytes
bInterval 0
Binary Object Store Descriptor:
bLength 5
bDescriptorType 15
wTotalLength 12
bNumDeviceCaps 1
USB 2.0 Extension Device Capability:
bLength 7
bDescriptorType 16
bDevCapabilityType 2
bmAttributes 0x00000006
Link Power Management (LPM) Supported
Device Status: 0x0000
(Bus Powered)
Test Data (for nitpickers):
(removed due to forum rules but available on request.)
Note only the RX path has frame errors:
Code:
usb0 Link encap:Ethernet HWaddr (censored)
inet addr:192.168.42.215 Bcast:192.168.42.255 Mask:255.255.255.0
inet6 addr: 2607:fb90:8635:67b8:78a2:7bff:febe:7afb/128 Scope:Global
inet6 addr: fe80::78a2:7bff:febe:7afb/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:12497 errors:1062 dropped:0 overruns:0 frame:1058
TX packets:22595 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:4121815 (3.9 Mb) TX bytes:27795493 (26.5 Mb)
I have run this on Opensuse, Fedora, Mint, and Ubuntu with similar results.
It would be useful if someone could duplicate this. I don't think the flavor of linux matters. I don't have a problem on windows.
Using the google on the interwebs, there is some chatter about RNDIS being dropped on "later" versions of Android. Reality? Perhaps OnePlus has attempted to add it back and didn't do it correctly.
I should also point out I'm using Tmobile, which is a IPV6 system. I'm using the Linux "network manager", but using "wicked" produced the same error.
I'm encountering the same issue.
Any hint on how to resolve it?
Sorry about the late reply. I'm not a regular here.
If you are on a OnePlus, please complain to them. I still have no solution.
This appears to be fixed on Oxygen OS rev 4.5.14
usb0 Link encap:Ethernet
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:13690 errors:0 dropped:0 overruns:0 frame:0
TX packets:11644 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:15616702 (14.8 Mb) TX bytes:8406490 (8.0 Mb)
yes 4.5.14 worked for me another thread here
https://forum.xda-developers.com/oneplus-5/help/slow-tether-usb-t3649501

usb tether using Linux PC fails after Android 8.1 update on OnePlus 5

I updated a OnePlus 5 from Android 8.0 to Android 8.1 and lost the ability to USB tether. Hotspot works fine. I've verified that some other users have this problem on the OnePlus subreddit. I'm on Opensuse 42.3.
Linux 4.4.126-48-default #1 SMP Sat Apr 7 05:22:50 UTC 2018 (f24992c) x86_64 x86_64 x86_64 GNU/Linux
This link indicates a "fix" similar to one on a Lineage forum. It doesn't solve the problem, but figured I would put it here to prevent similar posts from showing up in this thread.
https://forums.oneplus.com/threads/hotspot-not-working.769592/
At least this fix didn't break anything.
There are suggestions regarding changing the APN, but I no joy.
Using lsusb, it is clear that the phone is seen by the PC. However the phone doesn't show up when I run ifconfig.
This is the lsusb verbose output when usb tether is selected.
Code:
lsusb -s8:10 -v
Bus 008 Device 010: ID 2a70:f00e
Couldn't open device, some information will be missing
Device Descriptor:
bLength 18
bDescriptorType 1
bcdUSB 2.00
bDeviceClass 0 (Defined at Interface level)
bDeviceSubClass 0
bDeviceProtocol 0
bMaxPacketSize0 64
idVendor 0x2a70
idProduct 0xf00e
bcdDevice 4.04
iManufacturer 1
iProduct 2
iSerial 3
bNumConfigurations 1
Configuration Descriptor:
bLength 9
bDescriptorType 2
wTotalLength 75
bNumInterfaces 2
bConfigurationValue 1
iConfiguration 4
bmAttributes 0x80
(Bus Powered)
MaxPower 500mA
Interface Association:
bLength 8
bDescriptorType 11
bFirstInterface 0
bInterfaceCount 2
bFunctionClass 239 Miscellaneous Device
bFunctionSubClass 4
bFunctionProtocol 1
iFunction 7
Interface Descriptor:
bLength 9
bDescriptorType 4
bInterfaceNumber 0
bAlternateSetting 0
bNumEndpoints 1
bInterfaceClass 239 Miscellaneous Device
bInterfaceSubClass 4
bInterfaceProtocol 1
iInterface 5
** UNRECOGNIZED: 05 24 00 10 01
** UNRECOGNIZED: 05 24 01 00 01
** UNRECOGNIZED: 04 24 02 00
** UNRECOGNIZED: 05 24 06 00 01
Endpoint Descriptor:
bLength 7
bDescriptorType 5
bEndpointAddress 0x81 EP 1 IN
bmAttributes 3
Transfer Type Interrupt
Synch Type None
Usage Type Data
wMaxPacketSize 0x0008 1x 8 bytes
bInterval 9
Interface Descriptor:
bLength 9
bDescriptorType 4
bInterfaceNumber 1
bAlternateSetting 0
bNumEndpoints 2
bInterfaceClass 10 CDC Data
bInterfaceSubClass 0 Unused
bInterfaceProtocol 0
iInterface 6
Endpoint Descriptor:
bLength 7
bDescriptorType 5
bEndpointAddress 0x8e EP 14 IN
bmAttributes 2
Transfer Type Bulk
Synch Type None
Usage Type Data
wMaxPacketSize 0x0200 1x 512 bytes
bInterval 0
Endpoint Descriptor:
bLength 7
bDescriptorType 5
bEndpointAddress 0x0f EP 15 OUT
bmAttributes 2
Transfer Type Bulk
Synch Type None
Usage Type Data
wMaxPacketSize 0x0200 1x 512 bytes
bInterval 0
For completelness, this is the lsusb verbose output when tether is NOT selected.
Code:
lsusb -s8:13 -v
Bus 008 Device 013: ID 2a70:f003
Device Descriptor:
bLength 18
bDescriptorType 1
bcdUSB 2.00
bDeviceClass 0 (Defined at Interface level)
bDeviceSubClass 0
bDeviceProtocol 0
bMaxPacketSize0 64
idVendor 0x2a70
idProduct 0xf003
bcdDevice 4.04
iManufacturer 1 OnePlus
iProduct 2 OnePlus
iSerial 3 (redacted)
bNumConfigurations 1
Configuration Descriptor:
bLength 9
bDescriptorType 2
wTotalLength 62
bNumInterfaces 2
bConfigurationValue 1
iConfiguration 4 mtp
bmAttributes 0x80
(Bus Powered)
MaxPower 500mA
Interface Descriptor:
bLength 9
bDescriptorType 4
bInterfaceNumber 0
bAlternateSetting 0
bNumEndpoints 3
bInterfaceClass 255 Vendor Specific Class
bInterfaceSubClass 255 Vendor Specific Subclass
bInterfaceProtocol 0
iInterface 5 MTP
Endpoint Descriptor:
bLength 7
bDescriptorType 5
bEndpointAddress 0x81 EP 1 IN
bmAttributes 2
Transfer Type Bulk
Synch Type None
Usage Type Data
wMaxPacketSize 0x0200 1x 512 bytes
bInterval 0
Endpoint Descriptor:
bLength 7
bDescriptorType 5
bEndpointAddress 0x01 EP 1 OUT
bmAttributes 2
Transfer Type Bulk
Synch Type None
Usage Type Data
wMaxPacketSize 0x0200 1x 512 bytes
bInterval 0
Endpoint Descriptor:
bLength 7
bDescriptorType 5
bEndpointAddress 0x82 EP 2 IN
bmAttributes 3
Transfer Type Interrupt
Synch Type None
Usage Type Data
wMaxPacketSize 0x001c 1x 28 bytes
bInterval 6
Interface Descriptor:
bLength 9
bDescriptorType 4
bInterfaceNumber 1
bAlternateSetting 0
bNumEndpoints 2
bInterfaceClass 8 Mass Storage
bInterfaceSubClass 6 SCSI
bInterfaceProtocol 80 Bulk-Only
iInterface 6 Mass Storage
Endpoint Descriptor:
bLength 7
bDescriptorType 5
bEndpointAddress 0x83 EP 3 IN
bmAttributes 2
Transfer Type Bulk
Synch Type None
Usage Type Data
wMaxPacketSize 0x0200 1x 512 bytes
bInterval 0
Endpoint Descriptor:
bLength 7
bDescriptorType 5
bEndpointAddress 0x02 EP 2 OUT
bmAttributes 2
Transfer Type Bulk
Synch Type None
Usage Type Data
wMaxPacketSize 0x0200 1x 512 bytes
bInterval 1
Device Qualifier (for other device speed):
bLength 10
bDescriptorType 6
bcdUSB 2.00
bDeviceClass 0 (Defined at Interface level)
bDeviceSubClass 0
bDeviceProtocol 0
bMaxPacketSize0 64
bNumConfigurations 1
Device Status: 0x0000
(Bus Powered)

Categories

Resources