Attend XDA's Second Annual Developer Conference, XDA:DevCon 2014!
5,780,441 Members 43,690 Now Online
XDA Developers Android and Mobile Development Forum

[XMM6260][X-GOLD 626] Modem Specification / Documentation / Hack-Pack

Tip us?
 
Polarfuchs
Old
#11  
Senior Member
Thanks Meter 57
Posts: 825
Join Date: Apr 2008
direct link:
http://en.samaanet.com/?p=2390
none
The Following User Says Thank You to Polarfuchs For This Useful Post: [ Click to Expand ]
 
E:V:A
Old
#12  
E:V:A's Avatar
Recognized Developer - OP
Thanks Meter 1,762
Posts: 1,334
Join Date: Dec 2011
Location: -∇ϕ
Quote:
Originally Posted by Polarfuchs View Post
That's a direct rip-off of my XDA thread!

Any more posts with such links will be removed!
MSM8960 Info, Architecture and Bootloader(s)
El Grande Partition Table Reference
How to talk to the Modem with AT commands

[REF][ServiceMode] How to make your Samsung perform dog tricks
[REF|R&D|RF] RF/Radio properties of Samsung ServiceMode

Want to know when your phone is getting tracked or tapped?

Help us develop the IMSI Catcher / Spy Detector!
(To be part of the EFF & The Guardian Project toolsets.)
_______________________________
If you like what I do, just click THANKS!
Everything I do is free, altruism is the way!
ŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻ
I do not answer support related PM's.

 
Polarfuchs
Old
#13  
Senior Member
Thanks Meter 57
Posts: 825
Join Date: Apr 2008
How should I know, I just posted the link as "service" because the user above me could't post links.
none
The Following User Says Thank You to Polarfuchs For This Useful Post: [ Click to Expand ]
 
E:V:A
Old
#14  
E:V:A's Avatar
Recognized Developer - OP
Thanks Meter 1,762
Posts: 1,334
Join Date: Dec 2011
Location: -∇ϕ
I've been informed that the download link doesn't work. i will upload again as soon as I have time...
MSM8960 Info, Architecture and Bootloader(s)
El Grande Partition Table Reference
How to talk to the Modem with AT commands

[REF][ServiceMode] How to make your Samsung perform dog tricks
[REF|R&D|RF] RF/Radio properties of Samsung ServiceMode

Want to know when your phone is getting tracked or tapped?

Help us develop the IMSI Catcher / Spy Detector!
(To be part of the EFF & The Guardian Project toolsets.)
_______________________________
If you like what I do, just click THANKS!
Everything I do is free, altruism is the way!
ŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻ
I do not answer support related PM's.

 
androo45
Old
#15  
Member
Thanks Meter 13
Posts: 83
Join Date: Apr 2011
Really interesting stuff you have got here.

One thing I've been searching for a while now: I own a Galaxy Nexus, which has a XMM6260 modem. Samsung had on their stock ROM a feature in service mode where you can check the power modes of the 3G data connection. Since the Galaxy S2 has the same modem, thus it should be possible to get that feature.
I'm interested in this stuff because my Galaxy Nexus likes to drain like crazy on the 3G network that I use and I suspect that it has to do with the 3G data power modes. 3G+wifi is extremely efficient in power use but 3G+mobile date is al big battery hog.

I hope you post a working link soon, than I can start reading this stuff.
 
Synman
Old
#16  
Synman's Avatar
Recognized Developer
Thanks Meter 453
Posts: 709
Join Date: Nov 2010
Location: Outside Philadelphia

 
DONATE TO ME
Seems like this might be the best place to ask this... I also asked in the "fun with AT commands" thread so my apologies up front for the spam.

I'm looking for a fastboot friendly radio baseband I can flash with a 4.2.1 friendly RIL. This may be more than what I actually need but I've got a full telephony build of the Nexus 7 3G going and while SMS and MMS are fully functional I'm getting a CME ERROR: 4 when I try to do voice dialing and don't see anything coming in via logcat on an inbound call.

The mobile plan I'm using is full voice capable and verified as functional.

Doing a strings of the included RIL (libxgold-ril.so) shows all the necessary voice functions listed (although I guess this could be a false positive if it is interface based).

The modem mounts up on /dev/ttyACM0 and I'm able to do all the basics with radiooptions, except voice dialing and answering of course.

Any pointers / advice / direction would be greatly appreciated... coming up to speed real quick in this area.
AR.Pro - Poke Back - Adaptive Tuner --<>-- G-Tablet, Xoom, Galaxy Tab 10.1, Streak 7 4G, MID PD10 3G, Galaxy GT-I9100, & GT-I9250
The Following 2 Users Say Thank You to Synman For This Useful Post: [ Click to Expand ]
 
sparkyuiop
Old
(Last edited by sparkyuiop; 17th January 2013 at 05:57 PM.) Reason: Fix Picture Link
#17  
Member
Thanks Meter 94
Posts: 77
Join Date: Oct 2008
Location: Dorset
Default XGold626 One X Pinout

I have removed my BB CPU and here is the pinout if it helps anyone

The Following User Says Thank You to sparkyuiop For This Useful Post: [ Click to Expand ]
 
zad522
Old
#18  
Junior Member
Thanks Meter 0
Posts: 7
Join Date: Feb 2013
Default How to start?

I'm a rookie so is anyone can provide a step-by-step tutorial about how to send AT commands to the baseband processor directly? Right now I only can use i2cdetect to list i2c channels, but how to do next?

Thanks,
Andong
 
clevcoder
Old
#19  
Junior Member
Thanks Meter 0
Posts: 1
Join Date: Feb 2013
Location: Uppsala
Default XGold 626 Reversing

Quote:
Originally Posted by witchspace View Post
It appears that modem.bin consists of multiple partitions that are loaded separately at bootup of the device, reflecting the modem boot up sequence in libsec-ril.so:
[snip]
Hi!

Nice work. I'm working on reversing the xgold626 baseband as well. Specifically, I'm looking at the NELK2 baseband for my GT-i9300.

Perhaps we could join forces? Anyone else working on reversing the xgold626 baseband is welcome to contact me as well.

I'm reachable at: je at clevcode.org, or on my ircd (irc.clevcode.org, port 7000, SSL, nick je).

Cheers,
Joel
 
E:V:A
Old
#20  
E:V:A's Avatar
Recognized Developer - OP
Thanks Meter 1,762
Posts: 1,334
Join Date: Dec 2011
Location: -∇ϕ
Quote:
Originally Posted by witchspace View Post
It appears that modem.bin consists of multiple partitions that are loaded separately at bootup of the device, reflecting the modem boot up sequence in libsec-ril.so:...

I'm trying to run this in QEMU and created a basic environment, but as my understanding of ARM kernel space (interrupt handling, timers, etc) is very limited, it currently gets stuck in a loop waiting for some other thread (or interrupt handler) to update an address.
Quote:
Originally Posted by clevcoder View Post
Specifically, I'm looking at the NELK2 baseband for my GT-i9300. Perhaps we could join forces? Anyone else working on reversing the xgold626 baseband is welcome to contact me as well.
Yep, that is very interesting. Send me PM if there are more interest in pursuing this further! What's the primary interest of doing this?
MSM8960 Info, Architecture and Bootloader(s)
El Grande Partition Table Reference
How to talk to the Modem with AT commands

[REF][ServiceMode] How to make your Samsung perform dog tricks
[REF|R&D|RF] RF/Radio properties of Samsung ServiceMode

Want to know when your phone is getting tracked or tapped?

Help us develop the IMSI Catcher / Spy Detector!
(To be part of the EFF & The Guardian Project toolsets.)
_______________________________
If you like what I do, just click THANKS!
Everything I do is free, altruism is the way!
ŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻ
I do not answer support related PM's.


Tags
bp/cp, infineon, intel, modem, xmm6260
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes