Welcome to XDA

Search to go directly to your device's forum

Register an account

Unlock full posting privileges

Ask a question

No registration required
Post Reply

[XMM6260][X-GOLD 626] Modem Specification / Documentation / Hack-Pack

OP E:V:A

2nd December 2012, 01:24 AM   |  #11  
Senior Member
Thanks Meter: 58
 
829 posts
Join Date:Joined: Apr 2008
More
direct link:
http://en.samaanet.com/?p=2390
The Following User Says Thank You to Polarfuchs For This Useful Post: [ View ]
3rd December 2012, 02:39 AM   |  #12  
E:V:A's Avatar
OP Recognized Developer
Flag -∇ϕ
Thanks Meter: 1,869
 
1,378 posts
Join Date:Joined: Dec 2011
Quote:
Originally Posted by Polarfuchs

direct link:
http://en.samaanet.com/?p=2390

That's a direct rip-off of my XDA thread!

Any more posts with such links will be removed!
3rd December 2012, 09:23 AM   |  #13  
Senior Member
Thanks Meter: 58
 
829 posts
Join Date:Joined: Apr 2008
More
How should I know, I just posted the link as "service" because the user above me could't post links.
The Following User Says Thank You to Polarfuchs For This Useful Post: [ View ]
4th December 2012, 03:51 AM   |  #14  
E:V:A's Avatar
OP Recognized Developer
Flag -∇ϕ
Thanks Meter: 1,869
 
1,378 posts
Join Date:Joined: Dec 2011
I've been informed that the download link doesn't work. i will upload again as soon as I have time...
7th December 2012, 05:42 PM   |  #15  
Member
Thanks Meter: 13
 
83 posts
Join Date:Joined: Apr 2011
More
Really interesting stuff you have got here.

One thing I've been searching for a while now: I own a Galaxy Nexus, which has a XMM6260 modem. Samsung had on their stock ROM a feature in service mode where you can check the power modes of the 3G data connection. Since the Galaxy S2 has the same modem, thus it should be possible to get that feature.
I'm interested in this stuff because my Galaxy Nexus likes to drain like crazy on the 3G network that I use and I suspect that it has to do with the 3G data power modes. 3G+wifi is extremely efficient in power use but 3G+mobile date is al big battery hog.

I hope you post a working link soon, than I can start reading this stuff.
8th December 2012, 04:50 AM   |  #16  
Synman's Avatar
Recognized Developer
Flag Outside Philadelphia
Thanks Meter: 453
 
710 posts
Join Date:Joined: Nov 2010
Donate to Me
Seems like this might be the best place to ask this... I also asked in the "fun with AT commands" thread so my apologies up front for the spam.

I'm looking for a fastboot friendly radio baseband I can flash with a 4.2.1 friendly RIL. This may be more than what I actually need but I've got a full telephony build of the Nexus 7 3G going and while SMS and MMS are fully functional I'm getting a CME ERROR: 4 when I try to do voice dialing and don't see anything coming in via logcat on an inbound call.

The mobile plan I'm using is full voice capable and verified as functional.

Doing a strings of the included RIL (libxgold-ril.so) shows all the necessary voice functions listed (although I guess this could be a false positive if it is interface based).

The modem mounts up on /dev/ttyACM0 and I'm able to do all the basics with radiooptions, except voice dialing and answering of course.

Any pointers / advice / direction would be greatly appreciated... coming up to speed real quick in this area.
The Following 2 Users Say Thank You to Synman For This Useful Post: [ View ]
12th January 2013, 01:12 AM   |  #17  
Member
Flag Dorset
Thanks Meter: 96
 
78 posts
Join Date:Joined: Oct 2008
More
XGold626 One X Pinout
I have removed my BB CPU and here is the pinout if it helps anyone

Last edited by sparkyuiop; 17th January 2013 at 06:57 PM. Reason: Fix Picture Link
The Following User Says Thank You to sparkyuiop For This Useful Post: [ View ]
16th February 2013, 04:38 PM   |  #18  
Junior Member
Thanks Meter: 0
 
7 posts
Join Date:Joined: Feb 2013
How to start?
I'm a rookie so is anyone can provide a step-by-step tutorial about how to send AT commands to the baseband processor directly? Right now I only can use i2cdetect to list i2c channels, but how to do next?

Thanks,
Andong
22nd February 2013, 04:04 PM   |  #19  
Junior Member
Flag Uppsala
Thanks Meter: 0
 
1 posts
Join Date:Joined: Feb 2013
More
XGold 626 Reversing
Quote:
Originally Posted by witchspace

It appears that modem.bin consists of multiple partitions that are loaded separately at bootup of the device, reflecting the modem boot up sequence in libsec-ril.so:
[snip]

Hi!

Nice work. I'm working on reversing the xgold626 baseband as well. Specifically, I'm looking at the NELK2 baseband for my GT-i9300.

Perhaps we could join forces? Anyone else working on reversing the xgold626 baseband is welcome to contact me as well.

I'm reachable at: je at clevcode.org, or on my ircd (irc.clevcode.org, port 7000, SSL, nick je).

Cheers,
Joel
23rd February 2013, 08:42 PM   |  #20  
E:V:A's Avatar
OP Recognized Developer
Flag -∇ϕ
Thanks Meter: 1,869
 
1,378 posts
Join Date:Joined: Dec 2011
Quote:
Originally Posted by witchspace

It appears that modem.bin consists of multiple partitions that are loaded separately at bootup of the device, reflecting the modem boot up sequence in libsec-ril.so:...

I'm trying to run this in QEMU and created a basic environment, but as my understanding of ARM kernel space (interrupt handling, timers, etc) is very limited, it currently gets stuck in a loop waiting for some other thread (or interrupt handler) to update an address.

Quote:
Originally Posted by clevcoder

Specifically, I'm looking at the NELK2 baseband for my GT-i9300. Perhaps we could join forces? Anyone else working on reversing the xgold626 baseband is welcome to contact me as well.

Yep, that is very interesting. Send me PM if there are more interest in pursuing this further! What's the primary interest of doing this?

Post Reply Subscribe to Thread

Tags
bp/cp, infineon, intel, modem, xmm6260
Previous Thread Next Thread
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes