Touch Pro 2 FM Radio Questions/Answers

[marcus_cruz]

OK This is what I've uncovered about the FM radio in the Sprint CDMA Touch Pro2.
I'm posting this in hopes that someone else may have a few of the missing pieces.

I've tried hacking the registry all to hell and adding fake devices etc..
I even got the FM Radio to fire from with the Bluetooth Manager.
But it just loads and stares at me, laughing the whole time.
Also Bluetooth has to be on for the FM Radio to work.
I discovered this during debugging. Although if you execute it directly it may not prompt you.

1) The phone ships with an FM radio application. "My Device\Windows\BTFM.EXE"
2) The source code for the FM Radio application is located on a drive somewhere "propably in china" matching this path.
x:\BTW\btwce1.2\bin\Windows Mobile 5.0 Pocket PC SDK (ARMV4I)
3) All of the files,dll's and dependencies as far as I know of are there in the Shipped ROM.

a. AYGSHELL.dll
b. BRCMUI.DLL
c. BTAvrcSDK.dll
d. BtCoreIf.dll
e. COREDLL.DLL
f. FmRadioSdk.DLL
g. commctrl.dll
h. ole32.dll
i. wbtapiCE.dll
In addition there is a .qtc Manilla file in the ROM as well.
MPI_FmRadio.qtc
FMRadio_PPC_480x800.png
FMRadio_PPC_800x480.png
I dont know what this file is though.
FmRadioSdk.til
There is also an FMSDKWrapper.dll file, but the radio does'nt use this.

Some of the debug messages were.
[BT] FM API: send to Audio Gateway; msg=FMAPP_BTAG_REGISTER

[BT] FM API: receive from Audio Gateway; msg=BTAG_FMAPP_REG_ACK

[BT] FM API: receive from Audio Gateway; msg=BTAG_FMAPP_ENABLE_EVT

[BT] FM API: receive from Audio Gateway; msg=BTAG_FMAPP_AUDIO_MODE_EVT

[BT] FM API: receive from Audio Gateway; msg=BTAG_FMAPP_RDS_MODE_EVT

[BT] FM API: receive from Audio Gateway; msg=BTAG_FMAPP_STATUS

[BT] FM API: send to Audio Gateway; msg=FMAPP_BTAG_TUNE_FREQ

[BT] FM API: receive from Audio Gateway; msg=BTAG_FMAPP_TUNE_EVT

So my final thoughts are thay the hardware is there. We are either not getting any uotput from the BT chip or not interfacing with it correctly.
I'm leaning towards not getting any output from the chip.
I would really like to have the FM Radio working on this device.
It seems that GSM phones are more appealing to me every new device that comes out. The SPL's are alway's first, all the features of the phone are easily hacked or work right our of the box. Att&T even lists FM Radio as a feature on their Diamond 2 now.
Come on Sprint and Verizon give us what we want !
Maybe if just one CDMA carrier would ad the FM Radio we could flash our radio's to that radio. Maybe the CDMA Elite team will unlock the FM Radio.
Fingers crossed !

[lawmangrant]

@ marcus_cruz

Awesome work....

I think the Radio might be giving us fits right now, as it seems to be blocking it out. I would hope that once the HardSPL gets released, it would fix that issue.

[Gatecrasher R/T]

I've been playing with this for several days and figured I'd throw in my two cents too.

(I'm using a Sprint Pro2)

I found a reference in the registry to BRCMInit.dll. I tossed it into a hex editor and saw references to BCM4325D0 and BCM4325D1 config files. All of these are present on my phone. I wanted to compare them to one of the GSM phones, so I downloaded and dumped the shipped Asia/WWE ROM from the XDA Wiki.

Here's some file comparisons:

GSM - BRCMInit.dll size 53k,
CDMA - BRCMInit.dll size 37k

GSM - BCM4325D0_004.001.007.0072.000_38_4mhz_Class1_Brin gup_HTC.hcd size 10k
CDMA - BCM4325D0_004.001.007.0072.000_38_4mhz_Class1_Brin gup_HTC.hcd size 10k

GSM - BCM4325D1_004.002.004.0071.0072.hcd - size 9k
CDMA - BCM4325D1_004.002.004.0083.0084.hcd - size 11k

Here's my HIGHLY speculative guess, from someone who's only had a WinMo phone for 3 weeks (but who has a pretty solid IT background)

The HCD files are config files for the Broadcom chip and the DLL references those files to actually control it. My guess is that the FM functionality is missing from the BRCMInit.dll, hence the smaller size.

I'm thinking the chip is active, but not actually getting any signal from the antenna due to the missing config/control data. There's another registry entry (Active=0) that toggles to Active=1 whenever the radio programs are running. Doesn't matter if it's the Broadcom BTFM.exe, the HTC FM, or PowerRadio. Whenever the chip goes active, that flag toggles.

The downside to all of this is that it looks like BRCMInit.dll can't be replaced while Windows is running. So unless there's another trick that can be done, I guess we're back to waiting for the HardSPL.

[Gatecrasher R/T]

Maybe just for the sake of testing we could flash the CDMA BRCMInit.dll to a GSM phone and see if that breaks their FM tuner? That'd at least sort of confirm where the problem is.

I'm also wondering how much (if any) of this has to do with routing the headphone/antenna pickup signal through the 3.5mm jack instead of through the ExtUSB.

[marcus_cruz]

Originally Posted by Gatecrasher R/T

I've been playing with this for several days and figured I'd throw in my two cents too.

Here's some file comparisons:

GSM - BRCMInit.dll size 53k,
CDMA - BRCMInit.dll size 37k

GSM - BCM4325D0_004.001.007.0072.000_38_4mhz_Class1_Brin gup_HTC.hcd size 10k
CDMA - BCM4325D0_004.001.007.0072.000_38_4mhz_Class1_Brin gup_HTC.hcd size 10k

GSM - BCM4325D1_004.002.004.0071.0072.hcd - size 9k
CDMA - BCM4325D1_004.002.004.0083.0084.hcd - size 11k

Nice work ! I'm glad to see someone else is working on this, rather than just letting it fall under the carpet.
I guess I was spoiled with my wife's Omnia having FM Radio, that actually rocked.
Can you post the GSM version of these files.. So i dont have to dump a gsm rom. Pretty please.. ! I want to run them though disassembly.

[marcus_cruz]

Originally Posted by Gatecrasher R/T

Maybe just for the sake of testing we could flash the CDMA BRCMInit.dll to a GSM phone and see if that breaks their FM tuner? That'd at least sort of confirm where the problem is.

I'm also wondering how much (if any) of this has to do with routing the headphone/antenna pickup signal through the 3.5mm jack instead of through the ExtUSB.

This remains to be seen. I would imagine you could though. Since the FM Radio app is looking for a headphone device attached. When you plug in 3.5 headphones to the TP2, the headphones notification icon pop ups in the taskbar. Question is though, will it act as an antennae ? and actually pull frequencies through the air and report them back to the bluetooth chip/fm radio.

[Sephiro]

check this video at 05:36, this is the imagio and it has radio on it if we can get the drivers from that rom and use it on the tp2 we could have a radio start from this

http://www.youtube.com/watch?v=AMfcRRUIYwY

[marcus_cruz]

Originally Posted by Sephiro

check this video at 05:36, this is the imagio and it has radio on it if we can get the drivers from that rom and use it on the tp2 we could have a radio start from this

http://www.youtube.com/watch?v=AMfcRRUIYwY

I saw the icon for it, but he didnt run it..
If he ran it I would be all over that. Does anyone here have one of these Imagio's yet ? I would really like to know if it has the FM Radio working.
I searched and watched all the unboxing videos. I even saw one in which the reviewer said the stand on the back is an antennae ? Is this true ? Does this device have a TV signal reciever ? Or did he mean it was the cellular antennae ? Anyways..

Edit: FM RADIO Works on Verizon Imagio !

[Sephiro]

Originally Posted by marcus_cruz

I saw the icon for it, but he didnt run it..
If he ran it I would be all over that. Does anyone here have one of these Imagio's yet ? I would really like to know if it has the FM Radio working.
I searched and watched all the unboxing videos. I even saw one in which the reviewer said the stand on the back is an antennae ? Is this true ? Does this device have a TV signal reciever ? Or did he mean it was the cellular antennae ? Anyways..

TV antenna

[KilgoreBA]

8notime also has the Imagio and says FM Radio works great out of the box! Verizon even has FM Radio in the Programs list!!!